Passkeys, Helmets, and more! 🔑 🪖

[kentcdodds]

I'm excited to officially announce support for passkeys in the Epic Stack! We've got a few other goodies since the last release as well!

Here's a summary:

• WebAuthn Passkey Authentication – Added support for passkeys for seamless authentication. Check the authentication docs and Check the decision document
• Swapped out helmet in favor of @nichtsam/helmet which simplifies our express server further and avoids adding a bunch of unnecessary headers on non-document requests. I've been wanting to do this for a long time. Shout out to @nichtsam for taking up the challenge of building and maintaining the package!
• React Router v7 Enhancements – Additional refinements and type generation improvements.
• Node.js 22 Upgrade – Ensuring compatibility with the latest runtime.
• Remix & Sentry Improvements – Updated Remix utilities to v8, adjusted Sentry imports, and prevented response capture.
• Performance & Bug Fixes – Fixed uncaught exceptions, resource route responses, and a layout shift caused by DropdownMenu.
• Security Improvements – Validated password byte length
• Removed chalk usage (though it's still a transitive dep, it's nice to use the built-in colorizer util)
• Various Refactors – Simplified session queries, resolved alias configuration issues, and cleaned up unused props.

🚀 Huge thanks to our contributors, including several first-time contributors! 🎉

Full Changelog: Compare changes

Here are the GitHub AI generated release notes:

What's Changed

• Refinements after React Router v7 migration by @nichtsam in Refinements after React Router v7 migration #902
• change sentry import to correct package by @nichtsam in change sentry import to correct package #903
• Fix: ensure resource routes return valid Response objects by @hakimLyon in Fix: ensure resource routes return valid Response objects #905
• Refactor: use RR7 type generation by @hakimLyon in Refactor: use RR7 type generation #904
• add util for handling remix headers generally by @nichtsam in add util for handling remix headers generally #810
• fix: layout shift caused by Dropdownmenu and make it to a separate component by @rajeshg in fix: layout shift caused by Dropdownmenu and make it to a separate component #906
• update remix-utils to v8 by @isimmons in update remix-utils to v8 #908
• Bump Node to 22 by @hakimLyon in Bump Node to 22 #910
• Fixed a typo in server/index.ts by @KirillSBarsukov in Fixed a typo in server/index.ts #911
• Add react router generated types folder to remix.init/gitignore by @quangIle in Add react router generated types folder to remix.init/gitignore #912
• Fix: update alias configuration to resolve [bug]: Cannot read properties of undefined (reading 'resolvedPaths') shadcn-ui/ui#6483 by @hakimLyon in Fix: update alias configuration to resolve shadcn-ui/ui#6483 #916
• fix uncaught exception by @updbqn in fix uncaught exception #913
• sentry don't capture response by @nichtsam in sentry don't capture response #917
• Validate password byte length by @markuslewin in Validate password byte length #919
• fix: remove unused allowIndexing prop by @danieltorrer in fix: remove unused allowIndexing prop #922
• refactor: simplified session query by removing redundant user join by @AdityaKirad in refactor: simplified session query by removing redundant user join #923
• fix: add missing name for query parameter redirectTo by @roblesdotdev in fix: add missing name for query parameter redirectTo #926
• Remove chalk by @kinggoesgaming in Remove chalk #928
• move away from express helmet by @nichtsam in move away from express helmet #927
• Add WebAuthn passkey authentication support by @kentcdodds in Add WebAuthn passkey authentication support #936

New Contributors

• @isimmons made their first contribution in update remix-utils to v8 #908
• @quangIle made their first contribution in Add react router generated types folder to remix.init/gitignore #912
• @updbqn made their first contribution in fix uncaught exception #913
• @markuslewin made their first contribution in Validate password byte length #919
• @danieltorrer made their first contribution in fix: remove unused allowIndexing prop #922
• @AdityaKirad made their first contribution in refactor: simplified session query by removing redundant user join #923
• @roblesdotdev made their first contribution in fix: add missing name for query parameter redirectTo #926

Full Changelog: 2025-01-15...2025-02-19

---

This discussion was created from the release Passkeys, Helmets, and more! 🔑 🪖.

[nichtsam]

Really glad I managed to put it together, it was an interesting experience!
Excited about all the updates, new insights into making websites even better!

[kentcdodds]

It's soooo nice to not see all these unnecessary headers on JSON requests and things. Thank you!