You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/12 22:02:08 UTC
[PR] chore(deps): bump redux from 4.2.1 to 5.0.1 in /superset-frontend [superset]
dependabot[bot] opened a new pull request, #45228:
URL: https://github.com/apache/superset/pull/45228
Bumps [redux](https://github.com/reduxjs/redux) from 4.2.1 to 5.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/reduxjs/redux/releases">redux's releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<p>This <strong>patch release</strong> adjusts the <code>isPlainObject</code> util to allow objects created via <code>Object.create(null)</code>, and fixes a type issue which accidentally made the store state type non-nullable.</p>
<h2>What's Changed</h2>
<ul>
<li>fix(isPlainObject): support check Object.create(null) by <a href="https://github.com/zhe-he"><code>@zhe-he</code></a> in <a href="https://redirect.github.com/reduxjs/redux/pull/4633">reduxjs/redux#4633</a></li>
<li>fix(types/store): Unexpectedly narrowed return type of function <code>Store['getState']</code> by <a href="https://github.com/exuanbo"><code>@exuanbo</code></a> in <a href="https://redirect.github.com/reduxjs/redux/pull/4638">reduxjs/redux#4638</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/reduxjs/redux/compare/v5.0.0...v5.0.1">https://github.com/reduxjs/redux/compare/v5.0.0...v5.0.1</a></p>
<h2>v5.0.0</h2>
<p>This <strong>major release</strong>:</p>
<ul>
<li>Converts the codebase to TypeScript</li>
<li>Updates the packaging for better ESM/CJS compatibility and modernizes the build output</li>
<li>Requires that <code>action.type</code> <em>must</em> be a string</li>
<li>Continues to mark <code>createStore</code> as deprecated</li>
<li>Deprecates the <code>AnyAction</code> type in favor of an <code>UnknownAction</code> type that is used everywhere</li>
<li>Removes the <code>PreloadedState</code> type in favor of a new generic argument for the <code>Reducer</code> type.</li>
</ul>
<p>This release has <strong>breaking changes</strong>.</p>
<p>This release is part of a wave of major versions of all the Redux packages: <strong>Redux Toolkit 2.0, Redux core 5.0, React-Redux 9.0, Reselect 5.0, and Redux Thunk 3.0</strong>.</p>
<p>For full details on all of the breaking changes and other significant changes to all of those packages, see the <strong><a href="https://redux.js.org/usage/migrations/migrating-rtk-2">"Migrating to RTK 2.0 and Redux 5.0" migration guide</a></strong> in the Redux docs.</p>
<blockquote>
<p>[!NOTE]
The Redux core, Reselect, and Redux Thunk packages are included as part of Redux Toolkit, and RTK users do not need to manually upgrade them - you'll get them as part of the upgrade to RTK 2.0. (If you're not using Redux Toolkit yet, <a href="https://redux.js.org/usage/migrating-to-modern-redux"><strong>please start migrating your existing legacy Redux code to use Redux Toolkit today!</strong></a>)</p>
</blockquote>
<pre lang="bash"><code># RTK
npm install @reduxjs/toolkit
yarn add @reduxjs/toolkit
<h1>Standalone</h1>
<p>npm install redux
yarn add redux
</code></pre></p>
<h2>Changelog</h2>
<h3>ESM/CJS Package Compatibility</h3>
<p>The biggest theme of the Redux v5 and RTK 2.0 releases is trying to get "true" ESM package publishing compatibility in place, while still supporting CJS in the published package.</p>
<p><strong>The primary build artifact is now an ESM file, <code>dist/redux.mjs</code></strong>. Most build tools should pick this up. There's also a CJS artifact, and a second copy of the ESM file named <code>redux.legacy-esm.js</code> to support Webpack 4 (which does not recognize the <code>exports</code> field in <code>package.json</code>). Additionally, all of the build artifacts now live under <code>./dist/</code> in the published package.</p>
<h4>Modernized Build Output</h4>
<p>We now publish modern JS syntax targeting ES2020, including optional chaining, object spread, and other modern syntax. If you need to</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/reduxjs/redux/commit/50b010210df25c470386f7e39a9389a4a77b3842"><code>50b0102</code></a> format isPlainObject.ts</li>
<li><a href="https://github.com/reduxjs/redux/commit/66f955f764cb8e1a21ce42f8e4c522cdb87d056a"><code>66f955f</code></a> 5.0.1</li>
<li><a href="https://github.com/reduxjs/redux/commit/ffb02ebdf54b918b68af3d9168dc493ec5b212fb"><code>ffb02eb</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/redux/issues/4644">#4644</a> from reduxjs/publish-ci</li>
<li><a href="https://github.com/reduxjs/redux/commit/d641945e3f7570a0ccd8494c51c4484d9403c475"><code>d641945</code></a> add me to FUNDING.yml</li>
<li><a href="https://github.com/reduxjs/redux/commit/7a2fa784b9887a00ec564dbc85734922b2a9fe43"><code>7a2fa78</code></a> Add publish CI workflow</li>
<li><a href="https://github.com/reduxjs/redux/commit/fa2d899ae5f0f32593fda0b9fe5cd5ffd14a869d"><code>fa2d899</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/redux/issues/4638">#4638</a> from exuanbo/patch-1</li>
<li><a href="https://github.com/reduxjs/redux/commit/9e8a320a800470f1bca34e07e23457538148412e"><code>9e8a320</code></a> add type test</li>
<li><a href="https://github.com/reduxjs/redux/commit/105e38904e442a43399a6b4174c4f6c8709a0680"><code>105e389</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/redux/issues/4643">#4643</a> from ziayanj/patch-1</li>
<li><a href="https://github.com/reduxjs/redux/commit/f259beb49b746c428827babf307ab95e0a97ef0a"><code>f259beb</code></a> Update why-rtk-is-redux-today.md</li>
<li><a href="https://github.com/reduxjs/redux/commit/3cd25e11cbf6ddecd9dc3fcc4008df5448f9af30"><code>3cd25e1</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/redux/issues/4642">#4642</a> from factiondavid/patch-1</li>
<li>Additional commits viewable in <a href="https://github.com/reduxjs/redux/compare/v4.2.1...v5.0.1">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~phryneas">phryneas</a>, a new releaser for redux since your current version.</p>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore(deps): bump redux from 4.2.1 to 5.0.1 in /superset-frontend [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas closed pull request #45228: chore(deps): bump redux from 4.2.1 to 5.0.1 in /superset-frontend
URL: https://github.com/apache/superset/pull/45228
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore(deps): bump redux from 4.2.1 to 5.0.1 in /superset-frontend [superset]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #45228:
URL: https://github.com/apache/superset/pull/45228#issuecomment-6329095235
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore(deps): bump redux from 4.2.1 to 5.0.1 in /superset-frontend [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas commented on PR #45228:
URL: https://github.com/apache/superset/pull/45228#issuecomment-6329094181
Closing in favor of #45016, which now bumps redux together with @reduxjs/toolkit and redux-thunk as one coordinated change - redux-thunk 3.x peer-depends on redux ^5, so the three couldn't land independently.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore(deps): bump redux from 4.2.1 to 5.0.1 in /superset-frontend [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas commented on PR #45228:
URL: https://github.com/apache/superset/pull/45228#issuecomment-6320446934
Same story as #45016 and #45331: `npm ci` itself fails, since `@reduxjs/toolkit@1.9.7` and `redux-thunk@2.4.2` both still peer-depend on `redux@^4`, and that's what cascades into the docker-build/frontend-build/playwright failures here (no build artifact ever gets produced). These three need to land together as one coordinated bump, not separately. Tagging `hold:needs-work`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org