dependabot[bot] opened a new pull request, #36512: URL: https://github.com/apache/superset/pull/36512
Bumps [redux-thunk](https://github.com/reduxjs/redux-thunk) from 2.4.2 to 3.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/reduxjs/redux-thunk/releases";>redux-thunk's releases</a>.</em></p> <blockquote> <h2>v3.1.0</h2> <p>This <strong>major release</strong>:</p> <ul> <li>Updates the packaging for better ESM/CJS compatibility</li> <li>Changes the package to use named exports instead of a default export</li> </ul> <p>This release has <strong>breaking changes</strong>. (Note: this actually points to v3.1.0, which includes a hotfix that was meant for 3.0.0.)</p> <p>This release is part of a wave of major versions of all the Redux packages: <strong>Redux Toolkit 2.0, Redux core 5.0, React-Redux 9.0, Reselect 5.0, and Redux Thunk 3.0</strong>.</p> <p>For full details on all of the breaking changes and other significant changes to all of those packages, see the <strong><a href="https://redux.js.org/usage/migrations/migrating-rtk-2";>"Migrating to RTK 2.0 and Redux 5.0" migration guide</a></strong> in the Redux docs.</p> <blockquote> <p>[!NOTE] The Redux core, Reselect, and Redux Thunk packages are included as part of Redux Toolkit, and RTK users do not need to manually upgrade them - you'll get them as part of the upgrade to RTK 2.0. (If you're not using Redux Toolkit yet, <a href="https://redux.js.org/usage/migrating-to-modern-redux";><strong>please start migrating your existing legacy Redux code to use Redux Toolkit today!</strong></a>)</p> </blockquote> <pre lang="bash"><code># RTK npm install @reduxjs/toolkit yarn add @reduxjs/toolkit <h1>Standalone</h1> <p>npm install redux-thunk yarn add redux-thunk </code></pre></p> <h2>Changelog</h2> <h3>Named Exports Instead of Default Exports</h3> <p>The <code>redux-thunk</code> package previously used a single default export that was the thunk middleware, with an attached field named <code>withExtraArgument</code> that allowed customization.</p> <p><strong>The default export has been removed. There are now two named exports: <code>thunk</code> (the basic middleware) and <code>withExtraArgument</code>.</strong></p> <p>If you are using Redux Toolkit, this should have no effect, as RTK already handles this inside of <code>configureStore</code>.</p> <h3>ESM/CJS Package Compatibility</h3> <p>The biggest theme of the Redux v5 and RTK 2.0 releases is trying to get "true" ESM package publishing compatibility in place, while still supporting CJS in the published package.</p> <p><strong>The primary build artifact is now an ESM file, <code>dist/redux-thunk.mjs</code></strong>. Most build tools should pick this up. There's also a CJS artifact, and a second copy of the ESM file named <code>redux-thunk.legacy-esm.js</code> to support Webpack 4 (which does not recognize the <code>exports</code> field in <code>package.json</code>).</p> <h4>Build Tooling</h4> <p>We're now building the package using <a href="https://github.com/egoist/tsup";>https://github.com/egoist/tsup</a>. We also now include sourcemaps for the ESM and CJS artifacts.</p> <p>The repo has been updated to use Yarn 3 for dependencies and Vitest for running tests.</p> <h4>Dropping UMD Builds</h4> <p>Redux has always shipped with UMD build artifacts. These are primarily meant for direct import as script tags, such as in a CodePen or a no-bundler build environment.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/reduxjs/redux-thunk/commit/88008ea0642596595773c8d84a6b32c62e54ac12";><code>88008ea</code></a> Release 3.1.0</li> <li><a href="https://github.com/reduxjs/redux-thunk/commit/1de247626f3bc13e18901b451575d1c22e59718a";><code>1de2476</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/redux-thunk/issues/357";>#357</a> from reduxjs/feature/remove-extend</li> <li><a href="https://github.com/reduxjs/redux-thunk/commit/c8d4878f3da54bf8a5529c46c035d9a24c84c14f";><code>c8d4878</code></a> Drop the extend-redux addition</li> <li><a href="https://github.com/reduxjs/redux-thunk/commit/3da59d0187af67350b019b8e4a2a38d43ea579c2";><code>3da59d0</code></a> Release 3.0.1</li> <li><a href="https://github.com/reduxjs/redux-thunk/commit/d4909d3e10f254339799a895ece47ee6b523491d";><code>d4909d3</code></a> Kill the bindActionCreators overload for now</li> <li><a href="https://github.com/reduxjs/redux-thunk/commit/ece6c25b0047b456a36bc88a35f9a5591eab9b74";><code>ece6c25</code></a> Release 3.0.0</li> <li><a href="https://github.com/reduxjs/redux-thunk/commit/b419ba6a3e6b57ec30c372c3ad9af73065ae833d";><code>b419ba6</code></a> Bump Redux dep</li> <li><a href="https://github.com/reduxjs/redux-thunk/commit/72db9a6ebc34c28d0e0e0f04305cab4f62e8267d";><code>72db9a6</code></a> Release 3.0.0-rc.0</li> <li><a href="https://github.com/reduxjs/redux-thunk/commit/0ad3af14b90cae1b807ac839d5bbca3a1c229c8b";><code>0ad3af1</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/redux-thunk/issues/356";>#356</a> from reduxjs/feature/3.0-bump-deps-rc</li> <li><a href="https://github.com/reduxjs/redux-thunk/commit/88636824764104a0eb290ccd984346cc135196cb";><code>8863682</code></a> Remove old attw matrix entry</li> <li>Additional commits viewable in <a href="https://github.com/reduxjs/redux-thunk/compare/v2.4.2...v3.1.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
