fix: apply PRs #7500, #7499, #7491

[deepshekhardas]

Three fixes from refinedev/refine:

• fix: safe decode malformed URI route params refinedev/refine#7500 — fix: safe decode malformed URI route params
• fix(core): prevent cached show page data in create forms refinedev/refine#7499 — fix(core): prevent cached show page data in create forms
• fix(antd): add tooltip support for truncated menu labels in ThemedSider refinedev/refine#7491 — fix(antd): add tooltip support for truncated menu labels in ThemedSider

---

Summary by cubic

Fixes three issues: safely decodes malformed route params to prevent crashes, prevents cached show-page data from overriding create form defaults, and adds tooltips for truncated menu labels in the collapsed sider.

• Bug Fixes
  • Routing: Safely decode id and to params in @refinedev/core, @refinedev/react-router, and @refinedev/remix-router to avoid errors on malformed URI components.
  • Forms: In @refinedev/refine-core, useForm stops passing id for create actions to prevent useOne cache collisions; in @refinedev/refine-react-hook-form, useModalForm avoids resetting defaults on create.
  • UI: In @refinedev/antd, ThemedSider shows tooltips for truncated menu labels (including Logout) when collapsed.

^{Written for commit 0e6d1b5. Summary will update on new commits.}

[cubic-dev-ai]

1 issue found across 11 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="packages/react-router/src/safe-decode-uri-component.ts">

<violation number="1" location="packages/react-router/src/safe-decode-uri-component.ts:1">
P2: The `safeDecodeURIComponent` utility is duplicated in three separate packages (core inline, react-router, remix-router) with identical logic. Since both router packages already depend on `@refinedev/core` as a peer dependency, this utility could be exported from core once and imported by the router packages, eliminating the duplication and reducing the risk of behavioral drift.</violation>
</file>

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[cubic-dev-ai]

P2: The safeDecodeURIComponent utility is duplicated in three separate packages (core inline, react-router, remix-router) with identical logic. Since both router packages already depend on @refinedev/core as a peer dependency, this utility could be exported from core once and imported by the router packages, eliminating the duplication and reducing the risk of behavioral drift.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At packages/react-router/src/safe-decode-uri-component.ts, line 1:

<comment>The `safeDecodeURIComponent` utility is duplicated in three separate packages (core inline, react-router, remix-router) with identical logic. Since both router packages already depend on `@refinedev/core` as a peer dependency, this utility could be exported from core once and imported by the router packages, eliminating the duplication and reducing the risk of behavioral drift.</comment>

<file context>
@@ -0,0 +1,7 @@
+export const safeDecodeURIComponent = (value: string) => {
+  try {
+    return decodeURIComponent(value);
</file context>