Skip to content

Conversation

@snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade @reduxjs/toolkit from 1.8.5 to 1.8.6.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2022-10-09.
Release notes
Package name: @reduxjs/toolkit
  • 1.8.6 - 2022-10-09

    This bugfix release fixes a couple of issues with RTKQ endpoint tags not invalidating correctly, and tweaks the dispatch type inference to handle more variations of arrays.

    What's Changed

    Full Changelog: v1.8.5...v1.8.6

  • 1.8.5 - 2022-08-19

    This bugfix releas fixes an issue with large keepUnusedDataFor values overflowing JS timers, exports the types for the Redux DevTools Extension option, and and improves behavior of URL string generation.

    Changelog

    keepUnusedDataFor Timer Fix

    keepUnusedDataFor accepts a value in seconds. When there are no more active subscriptions for a piece of data, RTKQ will set a timer using setTimeout, and keepUnusedDataFor * 1000 as the timer value.

    We've been advising users that if they want to keep data in the cache forever that they should use a very large value for keepUnusedDataFor, such as 10 years in seconds.

    However, it turns out that JS engines use a 32-bit signed int for timers, and 32-bits in milliseconds is only 24.8 days. If a timer is given a value larger than that, it triggers immediately.

    We've updated the internal logic to clamp the keepUnusedDataFor value to be between 0 and THIRTY_TWO_BIT_MAX_TIMER_SECONDS - 1.

    Note that in RTK 1.9 (coming soon), RTKQ will also accept Infinity as a special keepUnusedDataFor value to indicate cached data should never be expired.

    Other Changes

    RTK inlines the TS types for the Redux DevTools Extension options to avoid an extra dependency, but the TS type for the options object wasn't exported publicly. We now export the DevToolsEnhancerOptions type.

    The logic for generating a final URL has been updated to avoid adding an extra trailing /.

    What's Changed

    • Prevent keepUnusedDataFor values from overflowing setTimeout counter by @ markerikson in #2595
    • remove typeof undefined checks where not necessary 🐃🪒 by @ phryneas in #1726
    • Update RDT options types, and export those + AnyListenerPredicate by @ markerikson in #2596
    • Ensures there is no unexpected slash in url before query params by @ ygrishajev in #2470

    Full Changelog: v1.8.4...v1.8.5

from @reduxjs/toolkit GitHub release notes
Commit messages
Package name: @reduxjs/toolkit
  • 1dd128b Merge pull request #2721 from manceau-jb/bugfix/invalidate-tags
  • e628ed6 Merge pull request #2702 from Bezmehrabi/bugfix/provided-tags
  • c4c3477 Remove previous api tags before adding new provided tags
  • 4f55c3a Merge pull request #2745 from VinceOPS/fix/export-type-thunk-middleware-from-redux-thunk
  • 1cd4bb2 Merge pull request #2629 from dokmic/bugfix/dispatch-type-inference
  • 76dc1f1 fix(toolkit): export "ThunkMiddleware"
  • ba1ba8a Fix invalidateTags
  • 27cf109 Fix invalidateTags
  • 7c3129c Merge pull request #2696 from PauloRSF/clarify-overrideexisting-docs
  • 2abbe74 docs: Clarify documentation about the overrideExisting flag in injectEndpoints
  • 3de00f4 Merge pull request #2642 from reduxjs/feature/ts-4.8-matrix
  • 43f6702 Add TS 4.8 to the test matrix
  • 6687a38 Add typings tests to cover the correct handling of read-only middleware arrays
  • 87cda7d Fix the `dispatch` type inference to correctly handle read-only middleware arrays
  • 4ab8c42 Release 1.8.5

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@vercel
Copy link

vercel bot commented Oct 30, 2022

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated
spotify2-0 ✅ Ready (Inspect) Visit Preview Oct 30, 2022 at 7:18AM (UTC)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants