Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Bump @reduxjs/toolkit from 1.9.7 to 2.9.2#13899

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Open
dependabot wants to merge1 commit intomaster
base:master
Choose a base branch
Loading
fromdependabot/npm_and_yarn/reduxjs/toolkit-2.9.2

Conversation

@dependabot
Copy link
Contributor

@dependabotdependabotbot commented on behalf ofgithubOct 30, 2025

Bumps@reduxjs/toolkit from 1.9.7 to 2.9.2.

Release notes

Sourced from@​reduxjs/toolkit's releases.

v2.9.2

Thisbugfix release fixes a potential internal data leak in SSR environments, improves handling of headers infetchBaseQuery, improvesretry handling for unexpected errors and request aborts, and fixes a longstanding issue withprefetch leaving an unused subscription. We've also shipped a newgraphqlRequestBaseQuery release with updated dependencies and better error handling.

Changelog

Internal Subscription Handling

We had a report that a Redux SSR app had internal subscription data showing up across different requests. After investigation, this was a bug introduced by the recentRTKQ perf optimizations, where the internal subscription fields were hoisted outside of the middleware setup and intocreateApi itself. This meant they existed outside of the per-store-instance lifecycle. We've reworked the logic to ensure the data is per-store again. We also fixed another issue that miscalculated when there was an active request while checking for cache entry cleanup.

Note that no actual app data was leaked in this case, just the internal subscription IDs that RTKQ uses in its own middleware to track the existence of subscriptions per cache entry.

fetchBaseQuery Headers

We've updatedfetchBaseQuery to avoid settingcontent-type in cases where a non-JSONifiable value likeFormData is being passed as the request body, so that the browser can set that content type itself. It also now sets theaccept header based on the selectedresponseHandler (JSON or text).

retry Behavior and Cleanup

Theretry util now respects themaxRetries option when catching unknown errors in addition to the existing known errors logic. It also now checks the request'sAbortSignal and will stop retrying if aborted.

In conjunction with that, dispatchingresetApiState will now abort all in-flight requests.

Theprefetch util andusePrefetch hook had a long-standing issue where they would create a subscription for a cache entry, but there was no way to clean up that subscription. This meant that the cache entry was effectively permanent. They now initiate the request without adding a subscription. This will fetch the cache entry and leave it in the store for thekeepUnusedDataFor period as intended, giving your app time to actually subscribe to the value (such as prefetching the cache entry in a route handler, and then subscribing in a component).

graphqlRequestBaseQuery

We've published@rtk-query/graphql-request-base-query v2.3.2, which updates thegraphql-request dep to ^7. We also fixed an issue where the error handling rethrew unknown errors - it now returns{error} as a base query is supposed to.

What's Changed

Full Changelog:reduxjs/redux-toolkit@v2.9.1...v2.9.2

v2.9.1

Thisbugfix release fixes how sorted entity adapters handle duplicate IDs, tweaks the TS types for RTKQ query state cache entries to improve how thedata field is handled, and adds better cleanup for long-running listener middleware effects.

What's Changed

Full Changelog:reduxjs/redux-toolkit@v2.9.0...v2.9.1

... (truncated)

Commits
  • 32887d7 Release 2.9.2
  • 4432629 Don't create subscriptions for prefetch calls (#5116)
  • c86d948 Addretry abort handling and abort onresetApiState (#5114)
  • 02630d2 fix: update graphql-request dependency to include version ^7.0.0 (#4987)
  • 1b95037 Respect maxRetries for unexpected errors (#5113)
  • c490b19 ImprovefetchBaseQuery default headers handling (#5112)
  • 7b7faea Fix potential subscription leakage in SSR environments (#5111)
  • fde0be7 Release 2.9.1
  • 47e7d81 Release@​rtk-query/codegen-openapi 2.1.0
  • b4b7d17 Allow executing effects that have become unsubscribed to be canceled by `list...
  • Additional commits viewable incompare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) from 1.9.7 to 2.9.2.- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)- [Commits](reduxjs/redux-toolkit@v1.9.7...v2.9.2)---updated-dependencies:- dependency-name: "@reduxjs/toolkit"  dependency-version: 2.9.2  dependency-type: direct:production  update-type: version-update:semver-major...Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotbot added dependenciesPull requests that update a dependency file javascriptPull requests that update Javascript code labelsOct 30, 2025
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant


[8]ページ先頭

©2009-2025 Movatter.jp