@tanstack/vue-router@1.170.39 @tanstack/start-server-core@1.169.41

high risk

TanStack/routerOct 12, 2026 → Oct 12, 20260 days between releases

What's New

Removed built-in `useSession` and `transferResponseBodyOwnership APIs, requiring manual session management.

Breaking Changes

  • Removed built-in `useSession` API
  • Removed `transferResponseBodyOwnership` method
  • Return 400 Bad Request for malformed percent-encoded request pathnames

New Features

  • Enhanced error handling for malformed paths
  • Improved middleware overhead reduction
  • Unified response helper behavior across framework

Improvements

  • Return 400 Bad Request for malformed percent-encoded request pathnames
  • Reduce middleware overhead by reusing loaded entries
  • Preserve response helper writes during body cancellation

Bug Fixes

  • Keep streaming page when middleware returns a response that reads the page body

Upgrade Notes

Migrate away from the built-in `useSession` API to a manual session library. Remove any usage of the `transferResponseBodyOwnership` method. Ensure request pathnames are properly percent-encoded, as malformed paths now return a 400 Bad Request status.

The Two Releases

@tanstack/vue-router@1.170.39

@tanstack/vue-router@1.170.39

Oct 12, 2026· 9 days ago

A patch release updating dependencies for the Vue Router package.

Full release notes
@tanstack/start-server-core@1.169.41

@tanstack/start-server-core@1.169.41

Oct 12, 2026· 9 days ago

Significant refactoring of server-side request handling and session management, removing legacy APIs like `useSession` and `transferResponseBodyOwnership`.

Full release notes