dependabot[bot] opened a new pull request, #40266: URL: https://github.com/apache/superset/pull/40266
Bumps [react-redux](https://github.com/reduxjs/react-redux) from 7.2.9 to 9.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/reduxjs/react-redux/releases";>react-redux's releases</a>.</em></p> <blockquote> <h2>v9.3.0</h2> <p>This <strong>feature release</strong> officially marks the <code>connect</code> API as deprecated.</p> <p>That's it. That's the release. :)</p> <h2>Changelog</h2> <h3><code>connect</code> deprecation</h3> <p>Way back in 2022, <a href="https://github.com/reduxjs/redux/releases/tag/v4.2.0";>I officially marked the original Redux core <code>createStore</code> method as deprecated in Redux 4.2.0</a>. As I clearly stated in that release, the goal of marking <code>createStore</code> as deprecated was to encourage users to migrate to modern Redux Toolkit, especially for those users who don't read our docs (such as beginners following outdated tutorials or in bootcamps, etc). The change was visual-only - adding <code>@deprecated</code> just marks the import with a strikethrough in an IDE, and the docblock references the "use modern Redux Toolkit" docs page. No runtime errors, no behavior changes, just an indication that the function is considered obsolete and you shouldn't use it directly any more. I also exported a <code>legacy_createStore</code> alias - same function, no deprecation attribute.</p> <p>It's 4 years later, and I'm finally doing the same thing for <code>connect</code> :)</p> <p>Again, <strong>nothing about <code>connect</code>'s behavior is changing, and we do not intend to remove the <code>connect</code> API</strong>. But it's 2026, and hooks are the correct way to use React and React-Redux today.</p> <p>We <em>do</em> strongly encourage users to <a href="https://redux.js.org/usage/migrating-to-modern-redux#modernizing-react-components-with-react-redux";>migrate from <code>connect</code> to the <code>useSelector / useDispatch</code> hooks</a> in general. This should result in codebases that are easier to understand and ought to improve performance slightly due to the way updates are handled.</p> <p>As with before, React-Redux now exports a <code>legacy_connect</code> alias that does not have the deprecation attribute applied.</p> <h3>Trusted Publishing Fixed</h3> <p>We had set up trusted publishing for React-Redux a couple years ago and did some releases with that enabled, but at some point I did a follow-up release that still used the previous manual workflow, and that lost the trusted publishing provenance flag. We had recent issues requesting a new release with trusted publishing enabled again, so we've fixed that with this release.</p> <h2>What's Changed</h2> <ul> <li>Mark <code>connect</code> as deprecated by <a href="https://github.com/markerikson";><code>@markerikson</code></a> in <a href="https://redirect.github.com/reduxjs/react-redux/pull/2269";>reduxjs/react-redux#2269</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/reduxjs/react-redux/compare/v9.2.0...v9.3.0";>https://github.com/reduxjs/react-redux/compare/v9.2.0...v9.3.0</a></p> <h2>v9.2.0</h2> <p>This <strong>feature release</strong> updates the React peer dependency to work with React 19, and improves treeshakeability of our build artifacts.</p> <h2>Changelog</h2> <h3>React 19 Compat</h3> <p><a href="https://react.dev/blog/2024/12/05/react-19";>React 19 was just released</a>! We've updated our peer dep to accept React 19, and updated our runtime and type tests to check against both React 18 and 19.</p> <p>Also see <a href="https://github.com/reduxjs/redux-toolkit/releases/tag/v2.5.0";>Redux Toolkit v2.5.0</a> for the same peer dep update.</p> <h3>Treeshaking</h3> <p>We've done some nitty-gritty optimization work to ensure bundlers correctly treeshake unused parts of the bundle.</p> <h2>What's Changed</h2> <ul> <li>Improve treeshakeability of build artifacts by <a href="https://github.com/aryaemami59";><code>@aryaemami59</code></a> in <a href="https://redirect.github.com/reduxjs/react-redux/pull/2176";>reduxjs/react-redux#2176</a></li> <li>Migrate to React by <a href="https://github.com/aryaemami59";><code>@aryaemami59</code></a> in <a href="https://redirect.github.com/reduxjs/react-redux/pull/2172";>reduxjs/react-redux#2172</a></li> <li>Migrate to React 19 (take 2) by <a href="https://github.com/markerikson";><code>@markerikson</code></a> in <a href="https://redirect.github.com/reduxjs/react-redux/pull/2216";>reduxjs/react-redux#2216</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/reduxjs/react-redux/commit/4134f88f179c46d3ae9c4ee7baaa589ff0fecfa8";><code>4134f88</code></a> Release 9.3.0</li> <li><a href="https://github.com/reduxjs/react-redux/commit/c0fd068b2a18358bb14ff3e4fe6785f3456a2955";><code>c0fd068</code></a> Fix release workflow Node version</li> <li><a href="https://github.com/reduxjs/react-redux/commit/bb01aeb1ee18aec0f90af830a329edf6fd00454d";><code>bb01aeb</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/react-redux/issues/2304";>#2304</a> from reduxjs/feature/fix-publishing-step</li> <li><a href="https://github.com/reduxjs/react-redux/commit/a0b1224c0ed4a522cc4ee9321632007ec6aaadde";><code>a0b1224</code></a> Rename publish file and fix permissions</li> <li><a href="https://github.com/reduxjs/react-redux/commit/ed7300a11626459b2b757a3b5a3af1b5089c2a70";><code>ed7300a</code></a> Merge branch 'master' of github.com:reduxjs/react-redux</li> <li><a href="https://github.com/reduxjs/react-redux/commit/8caf827a61bfb149a884d4b5e0fefaad4e81e143";><code>8caf827</code></a> Merge pull request <a href="https://redirect.github.com/reduxjs/react-redux/issues/2269";>#2269</a> from reduxjs/feature/deprecate-connect</li> <li><a href="https://github.com/reduxjs/react-redux/commit/9fd63fa02a81608728fc3ae5e8e5c527e01584ae";><code>9fd63fa</code></a> Disable release-it actual publishes</li> <li><a href="https://github.com/reduxjs/react-redux/commit/53b77d2747f6f5d21b87d7e3c02448d4526c098b";><code>53b77d2</code></a> Docs/hooks docs fixes (<a href="https://redirect.github.com/reduxjs/react-redux/issues/2279";>#2279</a>)</li> <li><a href="https://github.com/reduxjs/react-redux/commit/11b15c801152290e8c55a51dcc8d36fb743f886b";><code>11b15c8</code></a> Bump React to latest</li> <li><a href="https://github.com/reduxjs/react-redux/commit/1a18e2f22caa2577e871c254e09d26cb0ef687c5";><code>1a18e2f</code></a> Update SSR hydration error assertion for 19.2</li> <li>Additional commits viewable in <a href="https://github.com/reduxjs/react-redux/compare/v7.2.9...v9.3.0";>compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions";>GitHub Actions</a>, a new releaser for react-redux since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
