You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/15 03:23:51 UTC
[PR] chore(deps): bump redux-thunk from 2.4.2 to 3.1.0 in /superset-frontend [superset]
dependabot[bot] opened a new pull request, #45331:
URL: https://github.com/apache/superset/pull/45331
Bumps [redux-thunk](https://github.com/reduxjs/redux-thunk) from 2.4.2 to 3.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/reduxjs/redux-thunk/releases">redux-thunk's releases</a>.</em></p>
<blockquote>
<h2>v3.1.0</h2>
<p>This <strong>major release</strong>:</p>
<ul>
<li>Updates the packaging for better ESM/CJS compatibility</li>
<li>Changes the package to use named exports instead of a default export</li>
</ul>
<p>This release has <strong>breaking changes</strong>. (Note: this actually points to v3.1.0, which includes a hotfix that was meant for 3.0.0.)</p>
<p>This release is part of a wave of major versions of all the Redux packages: <strong>Redux Toolkit 2.0, Redux core 5.0, React-Redux 9.0, Reselect 5.0, and Redux Thunk 3.0</strong>.</p>
<p>For full details on all of the breaking changes and other significant changes to all of those packages, see the <strong><a href="https://redux.js.org/usage/migrations/migrating-rtk-2">"Migrating to RTK 2.0 and Redux 5.0" migration guide</a></strong> in the Redux docs.</p>
<blockquote>
<p>[!NOTE]
The Redux core, Reselect, and Redux Thunk packages are included as part of Redux Toolkit, and RTK users do not need to manually upgrade them - you'll get them as part of the upgrade to RTK 2.0. (If you're not using Redux Toolkit yet, <a href="https://redux.js.org/usage/migrating-to-modern-redux"><strong>please start migrating your existing legacy Redux code to use Redux Toolkit today!</strong></a>)</p>
</blockquote>
<pre lang="bash"><code># RTK
npm install @reduxjs/toolkit
yarn add @reduxjs/toolkit
<h1>Standalone</h1>
<p>npm install redux-thunk
yarn add redux-thunk
</code></pre></p>
<h2>Changelog</h2>
<h3>Named Exports Instead of Default Exports</h3>
<p>The <code>redux-thunk</code> package previously used a single default export that was the thunk middleware, with an attached field named <code>withExtraArgument</code> that allowed customization.</p>
<p><strong>The default export has been removed. There are now two named exports: <code>thunk</code> (the basic middleware) and <code>withExtraArgument</code>.</strong></p>
<p>If you are using Redux Toolkit, this should have no effect, as RTK already handles this inside of <code>configureStore</code>.</p>
<h3>ESM/CJS Package Compatibility</h3>
<p>The biggest theme of the Redux v5 and RTK 2.0 releases is trying to get "true" ESM package publishing compatibility in place, while still supporting CJS in the published package.</p>
<p><strong>The primary build artifact is now an ESM file, <code>dist/redux-thunk.mjs</code></strong>. Most build tools should pick this up. There's also a CJS artifact, and a second copy of the ESM file named <code>redux-thunk.legacy-esm.js</code> to support Webpack 4 (which does not recognize the <code>exports</code> field in <code>package.json</code>).</p>
<h4>Build Tooling</h4>
<p>We're now building the package using <a href="https://github.com/egoist/tsup">https://github.com/egoist/tsup</a>. We also now include sourcemaps for the ESM and CJS artifacts.</p>
<p>The repo has been updated to use Yarn 3 for dependencies and Vitest for running tests.</p>
<h4>Dropping UMD Builds</h4>
<p>Redux has always shipped with UMD build artifacts. These are primarily meant for direct import as script tags, such as in a CodePen or a no-bundler build environment.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/88008ea0642596595773c8d84a6b32c62e54ac12"><code>88008ea</code></a> Release 3.1.0</li>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/1de247626f3bc13e18901b451575d1c22e59718a"><code>1de2476</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/redux-thunk/issues/357">#357</a> from reduxjs/feature/remove-extend</li>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/c8d4878f3da54bf8a5529c46c035d9a24c84c14f"><code>c8d4878</code></a> Drop the extend-redux addition</li>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/3da59d0187af67350b019b8e4a2a38d43ea579c2"><code>3da59d0</code></a> Release 3.0.1</li>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/d4909d3e10f254339799a895ece47ee6b523491d"><code>d4909d3</code></a> Kill the bindActionCreators overload for now</li>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/ece6c25b0047b456a36bc88a35f9a5591eab9b74"><code>ece6c25</code></a> Release 3.0.0</li>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/b419ba6a3e6b57ec30c372c3ad9af73065ae833d"><code>b419ba6</code></a> Bump Redux dep</li>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/72db9a6ebc34c28d0e0e0f04305cab4f62e8267d"><code>72db9a6</code></a> Release 3.0.0-rc.0</li>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/0ad3af14b90cae1b807ac839d5bbca3a1c229c8b"><code>0ad3af1</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/redux-thunk/issues/356">#356</a> from reduxjs/feature/3.0-bump-deps-rc</li>
<li><a href="https://github.com/reduxjs/redux-thunk/commit/88636824764104a0eb290ccd984346cc135196cb"><code>8863682</code></a> Remove old attw matrix entry</li>
<li>Additional commits viewable in <a href="https://github.com/reduxjs/redux-thunk/compare/v2.4.2...v3.1.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore(deps): bump redux-thunk from 2.4.2 to 3.1.0 in /superset-frontend [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas closed pull request #45331: chore(deps): bump redux-thunk from 2.4.2 to 3.1.0 in /superset-frontend
URL: https://github.com/apache/superset/pull/45331
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore(deps): bump redux-thunk from 2.4.2 to 3.1.0 in /superset-frontend [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas commented on PR #45331:
URL: https://github.com/apache/superset/pull/45331#issuecomment-6308348033
Can't go green on its own: `redux-thunk@3` peer-depends on `redux@^5`, and we're still on `redux@4.2.1` / `@reduxjs/toolkit@1.9.7`, so `npm ci` dies with ERESOLVE before any job starts. This needs to ride along with #45228 and #45016 as one coordinated redux 5 upgrade rather than landing separately.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [PR] chore(deps): bump redux-thunk from 2.4.2 to 3.1.0 in /superset-frontend [superset]
Posted by "rusackas (via GitHub)" <gi...@apache.org>.
rusackas commented on PR #45331:
URL: https://github.com/apache/superset/pull/45331#issuecomment-6329094829
Closing in favor of #45016, which now bumps redux-thunk together with redux and @reduxjs/toolkit as one coordinated change - redux-thunk 3.x peer-depends on redux ^5, so the three couldn't land independently.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org