feat(tanstack-start)!: update to stable TanStack Start by jacobsfletch · Pull Request #18700 · payloadcms/payload

jacobsfletch · 2026-10-13T21:19:34Z

Updates @tanstack/react-start to ^1.169.1 and @tanstack/react-router to ^1.170.44 across the adapter, blank template, test app, and lockfile.

The stable release introduces two upstream breaking API changes:

Response headers are now read-only, so the adapter uses TanStack's setCookie response helper.
requestHandler was removed, so the cookie integration test uses createServerEntry.

Breaking Changes

Consumers of @payloadcms/tanstack-start must upgrade their TanStack peer dependencies.

  "dependencies": {
-   "@tanstack/react-router": "^1.120.0",
-   "@tanstack/react-start": "^1.168.60"
+   "@tanstack/react-router": "^1.170.44",
+   "@tanstack/react-start": "^1.169.1"
  }

References / Links

TanStack/router#7588: upstream PR that changed response header handling
@tanstack/[email protected] release notes: use setCookie or appendResponseHeader('set-cookie', cookie) to add cookies
Migrate from the Release Candidate: "Responses" section on cookie helpers
getResponseHeaders() source at 1.169.41: returns a detached snapshot of the response headers

socket-security · 2026-10-13T21:20:57Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@tanstack/react-router@1.170.41 ⏵ 1.170.44			⁺¹	⁺²
	@tanstack/react-start@1.168.60 ⏵ 1.169.1				⁺²

View full report

github-actions · 2026-10-13T21:30:09Z

📦 esbuild Bundle Analysis for payload

This analysis was generated by esbuild-bundle-analyzer. 🤖

Meta File	Out File	Size (raw)	Note
packages/next/meta_index.json	esbuild/index.js	242.21 KB	✅ No change
packages/payload/meta_index.json	esbuild/index.js	1.93 MB	✅ No change
packages/payload/meta_shared.json	esbuild/exports/shared.js	543.06 KB	✅ No change
packages/richtext-lexical/meta_client.json	esbuild/exports/client_optimized/index.js	296.99 KB	✅ No change
packages/ui/meta_client.json	esbuild/exports/client_optimized/index.js	1.32 MB	✅ -1.20 KB (-0.1%)
packages/ui/meta_shared.json	esbuild/exports/shared_optimized/index.js	19.14 KB	✅ No change

Largest paths

These visualization shows top 20 largest paths in the bundle.

Meta file: packages/next/meta_index.json, Out file: esbuild/index.js

Path	Size
../../node_modules	${{\color{Goldenrod}{ ████████████████████████▋ }}}$ 98.9%, 237.09 KB
dist/adapters/router.js	${{\color{Goldenrod}{ }}}$ 0.3%, 718 B
dist/adapters/server.js	${{\color{Goldenrod}{ }}}$ 0.2%, 533 B
dist/adapters/layout.js	${{\color{Goldenrod}{ }}}$ 0.2%, 529 B
dist/adapters/views.js	${{\color{Goldenrod}{ }}}$ 0.1%, 324 B
dist/utilities/initAdminContext.js	${{\color{Goldenrod}{ }}}$ 0.1%, 315 B
dist/utilities/selectiveCache.js	${{\color{Goldenrod}{ }}}$ 0.1%, 263 B
dist/esbuildEntry.js	${{\color{Goldenrod}{ }}}$ 0.0%, 0 B

Meta file: packages/payload/meta_index.json, Out file: esbuild/index.js

Path	Size
../../node_modules	${{\color{Goldenrod}{ █████████████████▏ }}}$ 68.6%, 1.32 MB
dist/collections/operations	${{\color{Goldenrod}{ ▉ }}}$ 3.6%, 68.23 KB
dist/fields/hooks	${{\color{Goldenrod}{ ▌ }}}$ 2.4%, 46.62 KB
dist/uploads/fileVersioning	${{\color{Goldenrod}{ ▎ }}}$ 1.2%, 22.30 KB
dist/globals/operations	${{\color{Goldenrod}{ ▎ }}}$ 1.0%, 19.50 KB
dist/auth/operations	${{\color{Goldenrod}{ ▏ }}}$ 0.9%, 17.10 KB
dist/utilities/configToJSONSchema.js	${{\color{Goldenrod}{ ▏ }}}$ 0.8%, 16.04 KB
dist/queues/operations	${{\color{Goldenrod}{ ▏ }}}$ 0.7%, 14.32 KB
dist/fields/config	${{\color{Goldenrod}{ ▏ }}}$ 0.7%, 13.77 KB
dist/collections/config	${{\color{Goldenrod}{ ▏ }}}$ 0.6%, 11.96 KB
dist/utilities/telemetry	${{\color{Goldenrod}{ ▏ }}}$ 0.6%, 11.93 KB
dist/fields/validations.js	${{\color{Goldenrod}{ ▏ }}}$ 0.5%, 10.29 KB
dist/cli/commands	${{\color{Goldenrod}{ ▏ }}}$ 0.5%, 9.93 KB
dist/config/orderable	${{\color{Goldenrod}{ ▏ }}}$ 0.5%, 8.78 KB
dist/uploads/fetchAPI-multipart	${{\color{Goldenrod}{ }}}$ 0.4%, 8.39 KB
dist/config/sanitize.js	${{\color{Goldenrod}{ }}}$ 0.4%, 8.16 KB
dist/database/migrations	${{\color{Goldenrod}{ }}}$ 0.4%, 8.16 KB
dist/utilities/entityInputSchema	${{\color{Goldenrod}{ }}}$ 0.4%, 8.02 KB
dist/uploads/generateFileData.js	${{\color{Goldenrod}{ }}}$ 0.4%, 7.97 KB
dist/collections/endpoints	${{\color{Goldenrod}{ }}}$ 0.4%, 7.85 KB
(other)	${{\color{Goldenrod}{ ███████▊ }}}$ 31.4%, 602.99 KB

Meta file: packages/payload/meta_shared.json, Out file: esbuild/exports/shared.js

Path	Size
../../node_modules	${{\color{Goldenrod}{ ██████████████████████ }}}$ 88.2%, 474.44 KB
dist/fields/validations.js	${{\color{Goldenrod}{ ▍ }}}$ 1.9%, 10.26 KB
dist/fields/config	${{\color{Goldenrod}{ ▎ }}}$ 1.1%, 5.83 KB
dist/utilities/traverseFields.js	${{\color{Goldenrod}{ ▏ }}}$ 0.8%, 4.34 KB
dist/utilities/deepCopyObject.js	${{\color{Goldenrod}{ ▏ }}}$ 0.7%, 3.52 KB
dist/collections/config	${{\color{Goldenrod}{ ▏ }}}$ 0.6%, 3.44 KB
dist/config/orderable	${{\color{Goldenrod}{ ▏ }}}$ 0.6%, 3.13 KB
dist/fields/baseFields	${{\color{Goldenrod}{ ▏ }}}$ 0.5%, 2.79 KB
dist/config/client.js	${{\color{Goldenrod}{ ▏ }}}$ 0.5%, 2.62 KB
dist/auth/cookies.js	${{\color{Goldenrod}{ }}}$ 0.3%, 1.55 KB
dist/utilities/flattenTopLevelFields.js	${{\color{Goldenrod}{ }}}$ 0.3%, 1.42 KB
dist/utilities/getVersionsConfig.js	${{\color{Goldenrod}{ }}}$ 0.2%, 1.04 KB
dist/globals/config	${{\color{Goldenrod}{ }}}$ 0.2%, 957 B
dist/uploads/generatePayloadFileURL.js	${{\color{Goldenrod}{ }}}$ 0.2%, 864 B
dist/utilities/unflatten.js	${{\color{Goldenrod}{ }}}$ 0.2%, 850 B
dist/utilities/flattenAllFields.js	${{\color{Goldenrod}{ }}}$ 0.1%, 798 B
dist/errors/ValidationError.js	${{\color{Goldenrod}{ }}}$ 0.1%, 772 B
dist/utilities/sanitizeUserDataForEmail.js	${{\color{Goldenrod}{ }}}$ 0.1%, 713 B
dist/auth/extractJWT.js	${{\color{Goldenrod}{ }}}$ 0.1%, 696 B
dist/utilities/getFieldPermissions.js	${{\color{Goldenrod}{ }}}$ 0.1%, 681 B
(other)	${{\color{Goldenrod}{ ██▉ }}}$ 11.8%, 63.68 KB

Meta file: packages/richtext-lexical/meta_client.json, Out file: esbuild/exports/client_optimized/index.js

Path	Size
dist/features/blocks	${{\color{Goldenrod}{ ███▌ }}}$ 14.5%, 42.66 KB
dist/lexical/plugins	${{\color{Goldenrod}{ ██▉ }}}$ 11.7%, 34.51 KB
dist/lexical/ui	${{\color{Goldenrod}{ ██▊ }}}$ 11.4%, 33.54 KB
dist/features/table	${{\color{Goldenrod}{ ██▎ }}}$ 9.3%, 27.46 KB
dist/features/toolbars	${{\color{Goldenrod}{ █▋ }}}$ 6.8%, 19.93 KB
dist/features/link	${{\color{Goldenrod}{ █▌ }}}$ 6.3%, 18.56 KB
dist/features/upload	${{\color{Goldenrod}{ █▏ }}}$ 4.8%, 14.03 KB
dist/features/textState	${{\color{Goldenrod}{ ▉ }}}$ 3.8%, 11.08 KB
dist/lexical/utils	${{\color{Goldenrod}{ ▊ }}}$ 3.4%, 10.02 KB
dist/features/relationship	${{\color{Goldenrod}{ ▊ }}}$ 3.2%, 9.32 KB
dist/features/converters	${{\color{Goldenrod}{ ▋ }}}$ 2.9%, 8.41 KB
dist/utilities/fieldsDrawer	${{\color{Goldenrod}{ ▋ }}}$ 2.8%, 8.12 KB
dist/features/debug	${{\color{Goldenrod}{ ▋ }}}$ 2.5%, 7.40 KB
dist/lexical/config	${{\color{Goldenrod}{ ▍ }}}$ 1.7%, 5.14 KB
dist/features/indent	${{\color{Goldenrod}{ ▎ }}}$ 1.4%, 4.19 KB
dist/features/lists	${{\color{Goldenrod}{ ▎ }}}$ 1.2%, 3.67 KB
dist/lexical/LexicalEditor.js	${{\color{Goldenrod}{ ▎ }}}$ 1.1%, 3.33 KB
dist/features/horizontalRule	${{\color{Goldenrod}{ ▎ }}}$ 1.1%, 3.29 KB
dist/features/format	${{\color{Goldenrod}{ ▎ }}}$ 1.1%, 3.28 KB
dist/field/Field.js	${{\color{Goldenrod}{ ▎ }}}$ 1.0%, 3.06 KB
(other)	${{\color{Goldenrod}{ █████████████████████▍ }}}$ 85.5%, 251.12 KB

Meta file: packages/ui/meta_client.json, Out file: esbuild/exports/client_optimized/index.js

Path	Size
../../node_modules	${{\color{Goldenrod}{ ███████▎ }}}$ 29.3%, 382.60 KB
dist/elements/Hierarchy	${{\color{Goldenrod}{ ▉ }}}$ 3.8%, 49.35 KB
dist/elements/BulkUpload	${{\color{Goldenrod}{ ▌ }}}$ 2.3%, 30.54 KB
dist/elements/Table	${{\color{Goldenrod}{ ▌ }}}$ 2.2%, 28.86 KB
dist/views/Version	${{\color{Goldenrod}{ ▌ }}}$ 2.1%, 27.71 KB
dist/views/Edit	${{\color{Goldenrod}{ ▍ }}}$ 1.7%, 22.21 KB
dist/views/HierarchyList	${{\color{Goldenrod}{ ▍ }}}$ 1.7%, 21.55 KB
dist/views/Dashboard	${{\color{Goldenrod}{ ▍ }}}$ 1.5%, 19.82 KB
dist/elements/WhereBuilder	${{\color{Goldenrod}{ ▎ }}}$ 1.4%, 17.65 KB
dist/providers/Auth	${{\color{Goldenrod}{ ▎ }}}$ 1.3%, 17.41 KB
dist/fields/Relationship	${{\color{Goldenrod}{ ▎ }}}$ 1.2%, 16.23 KB
dist/forms/Form	${{\color{Goldenrod}{ ▎ }}}$ 1.2%, 15.99 KB
dist/fields/Upload	${{\color{Goldenrod}{ ▎ }}}$ 1.1%, 14.95 KB
dist/fields/Blocks	${{\color{Goldenrod}{ ▎ }}}$ 1.1%, 14.91 KB
dist/elements/Popup	${{\color{Goldenrod}{ ▎ }}}$ 1.0%, 13.32 KB
dist/views/List	${{\color{Goldenrod}{ ▎ }}}$ 1.0%, 13.21 KB
dist/elements/ReactSelect	${{\color{Goldenrod}{ ▎ }}}$ 1.0%, 12.98 KB
dist/elements/PublishButton	${{\color{Goldenrod}{ ▏ }}}$ 0.9%, 12.00 KB
dist/elements/QueryPresets	${{\color{Goldenrod}{ ▏ }}}$ 0.8%, 10.82 KB
dist/elements/FileManager	${{\color{Goldenrod}{ ▏ }}}$ 0.8%, 10.42 KB
(other)	${{\color{Goldenrod}{ █████████████████▋ }}}$ 70.7%, 923.35 KB

Meta file: packages/ui/meta_shared.json, Out file: esbuild/exports/shared_optimized/index.js

Path	Size
dist/graphics/Logo	${{\color{Goldenrod}{ ███████▌ }}}$ 30.4%, 5.61 KB
../../node_modules	${{\color{Goldenrod}{ ███▌ }}}$ 14.4%, 2.65 KB
dist/graphics/Icon	${{\color{Goldenrod}{ ██ }}}$ 8.2%, 1.51 KB
dist/utilities/formatDocTitle	${{\color{Goldenrod}{ █▊ }}}$ 7.1%, 1.32 KB
dist/providers/TableColumns	${{\color{Goldenrod}{ █▏ }}}$ 4.7%, 866 B
dist/utilities/getGlobalData.js	${{\color{Goldenrod}{ █ }}}$ 4.1%, 762 B
dist/utilities/api.js	${{\color{Goldenrod}{ █ }}}$ 4.1%, 756 B
dist/utilities/groupNavItems.js	${{\color{Goldenrod}{ █ }}}$ 4.0%, 745 B
dist/utilities/traverseForLocalizedFields.js	${{\color{Goldenrod}{ ▊ }}}$ 3.1%, 570 B
dist/elements/Translation	${{\color{Goldenrod}{ ▋ }}}$ 2.7%, 493 B
dist/utilities/handleTakeOver.js	${{\color{Goldenrod}{ ▌ }}}$ 2.4%, 440 B
dist/elements/withMergedProps	${{\color{Goldenrod}{ ▍ }}}$ 1.8%, 339 B
dist/utilities/getNavGroups.js	${{\color{Goldenrod}{ ▍ }}}$ 1.8%, 338 B
dist/utilities/getVisibleEntities.js	${{\color{Goldenrod}{ ▍ }}}$ 1.8%, 329 B
dist/elements/WithServerSideProps	${{\color{Goldenrod}{ ▎ }}}$ 1.3%, 232 B
dist/layouts/Root	${{\color{Goldenrod}{ ▎ }}}$ 1.2%, 230 B
dist/utilities/handleGoBack.js	${{\color{Goldenrod}{ ▎ }}}$ 1.0%, 180 B
dist/fields/mergeFieldStyles.js	${{\color{Goldenrod}{ ▏ }}}$ 0.9%, 158 B
dist/forms/Form	${{\color{Goldenrod}{ ▏ }}}$ 0.8%, 152 B
dist/utilities/handleBackToDashboard.js	${{\color{Goldenrod}{ ▏ }}}$ 0.8%, 152 B
(other)	${{\color{Goldenrod}{ █████████████████▍ }}}$ 69.6%, 12.84 KB

Details

Next to the size is how much the size has increased or decreased compared with the base branch of this PR.

‼️: Size increased by 20% or more. Special attention should be given to this.
⚠️: Size increased in acceptable range (lower than 20%).
✅: No change or even downsized.
🗑️: The out file is deleted: not found in base branch.
🆕: The out file is newly found: will be added to base branch.

denolfe · 2026-10-14T15:45:45Z

All CI runs are failing without this change, merging.

github-actions · 2026-10-16T01:23:56Z

🚀 This is included in version v4.0.0-beta.2

github-actions Bot added the created-by: Payload team label Oct 13, 2026

chore(tanstack-start): update to stable TanStack Start

db07ecd

jacobsfletch force-pushed the chore/tanstack-1-stable branch from b48371a to db07ecd Compare October 13, 2026 21:23

jacobsfletch changed the title ~~chore(tanstack-start): update to stable TanStack Start~~ chore(tanstack-start)!: update to stable TanStack Start Oct 13, 2026

jacobsfletch marked this pull request as ready for review October 13, 2026 21:25

chore: fix TanStack stable CI failures

dc224df

jacobsfletch requested a review from denolfe as a code owner October 14, 2026 02:51

jacobsfletch requested a review from r1tsuu October 14, 2026 02:58

AlessioGr requested changes Oct 14, 2026

View reviewed changes

Comment thread test/package.json Resolved

jacobsfletch added 2 commits October 14, 2026 09:11

chore: pin TanStack versions in test app

39ed9aa

chore: use TanStack cookie helper

2e1dcd3

jacobsfletch changed the title ~~chore(tanstack-start)!: update to stable TanStack Start~~ feat(tanstack-start)!: update to stable TanStack Start Oct 14, 2026

denolfe mentioned this pull request Oct 14, 2026

fix(tanstack-start): set cookies from server functions on react-start 1.169 #18716

Closed

denolfe merged commit 32c06ff into main Oct 14, 2026
574 of 576 checks passed

denolfe deleted the chore/tanstack-1-stable branch October 14, 2026 15:45

Navigation Menu

Repository navigation

feat(tanstack-start)!: update to stable TanStack Start - #18700

feat(tanstack-start)!: update to stable TanStack Start#18700
denolfe merged 4 commits into
mainfrom
chore/tanstack-1-stable

jacobsfletch commented Oct 13, 2026 •

edited by denolfe

Loading

Uh oh!

socket-security Bot commented Oct 13, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 13, 2026

Meta file: packages/next/meta_index.json, Out file: esbuild/index.js

Meta file: packages/payload/meta_index.json, Out file: esbuild/index.js

Meta file: packages/payload/meta_shared.json, Out file: esbuild/exports/shared.js

Meta file: packages/richtext-lexical/meta_client.json, Out file: esbuild/exports/client_optimized/index.js

Meta file: packages/ui/meta_client.json, Out file: esbuild/exports/client_optimized/index.js

Meta file: packages/ui/meta_shared.json, Out file: esbuild/exports/shared_optimized/index.js

Uh oh!

Uh oh!

denolfe commented Oct 14, 2026

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

jacobsfletch commented Oct 13, 2026 • edited by denolfe Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Breaking Changes

References / Links

Uh oh!

socket-security Bot commented Oct 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 13, 2026

📦 esbuild Bundle Analysis for payload

Meta file: packages/next/meta_index.json, Out file: esbuild/index.js

Meta file: packages/payload/meta_index.json, Out file: esbuild/index.js

Meta file: packages/payload/meta_shared.json, Out file: esbuild/exports/shared.js

Meta file: packages/richtext-lexical/meta_client.json, Out file: esbuild/exports/client_optimized/index.js

Meta file: packages/ui/meta_client.json, Out file: esbuild/exports/client_optimized/index.js

Meta file: packages/ui/meta_shared.json, Out file: esbuild/exports/shared_optimized/index.js

Uh oh!

Uh oh!

denolfe commented Oct 14, 2026

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

jacobsfletch commented Oct 13, 2026 •

edited by denolfe

Loading

socket-security Bot commented Oct 13, 2026 •

edited

Loading