deps: bump @tanstack/react-router from 1.168.25 to 1.169.1 in /web

[dependabot]

Bumps @tanstack/react-router from 1.168.25 to 1.169.1.

Changelog

Sourced from @​tanstack/react-router's changelog.

1.169.1

Patch Changes

• Updated dependencies [4a1e63f]:
  • @​tanstack/router-core@​1.169.1

1.169.0

Minor Changes

• Allow params.parse to experimentally return false to skip an incoming route candidate during path matching. Thrown parse errors still surface on the selected match instead of falling through, and outgoing typed route-template links continue to use exact route lookup followed by params.stringify for URL generation. (#7263)

Patch Changes

• Updated dependencies [c992495]:
  • @​tanstack/router-core@​1.169.0

1.168.26

Patch Changes

• Updated dependencies [b5c4183]:
  • @​tanstack/router-core@​1.168.18

Commits

• 2c9f5c0 ci: changeset release
• 4a1e63f fix: parse params union inference (#7306)
• dad0ec8 ci: changeset release
• c992495 feat: match params (#7263)
• a730094 ci: changeset release
• See full diff in compare view

[claude]

LGTM, routine Dependabot minor bump of @tanstack/react-router (frontend dep only).

Extended reasoning...

Overview

This is a Dependabot PR bumping @tanstack/react-router from 1.168.25 to 1.169.1 in web/, with the corresponding package-lock.json updates (transitive bumps to @tanstack/router-core, seroval, seroval-plugins). No source code changes.

Security risks

None apparent. This is a frontend routing library used only in the web/ UI bundle. The version bump is a minor + patch (1.168.x → 1.169.1) within the same major. The included changelog entries are an experimental opt-in params.parse extension and a type-inference fix — neither alters existing call sites without explicit adoption.

Level of scrutiny

Low. Mechanical dependency bump of a frontend-only package, generated by Dependabot, with no code in this repo affected by the new opt-in API. Build is type-checked (tsc && vite build), so any breaking type change would surface in CI.

Other factors

No bugs flagged by the bug-hunting system, no prior reviews to reconcile, no CODEOWNER-sensitive paths touched.

[dangtony98]

@dependabot rebase

[dangtony98]

LGTM — routine Dependabot minor bump of @tanstack/react-router. Frontend-only, CI green (incl. tsc + vite build), and no source code in this repo uses the new opt-in params.parse API.