Skip to content

build(deps): Bump the minor-and-patch group across 1 directory with 7 updates - #90

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-65762d3d9c
Open

build(deps): Bump the minor-and-patch group across 1 directory with 7 updates#90
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-65762d3d9c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 7 updates in the / directory:

Package From To
@reduxjs/toolkit 2.13.0 2.14.0
fast-xml-parser 5.11.2 5.12.0
@uwdata/mosaic-core 0.34.3 0.35.0
@uwdata/mosaic-sql 0.34.3 0.35.0
electron 45.2.1 45.2.2
lucide-react 1.66.0 1.67.0
rimraf 6.1.3 6.1.4

Updates @reduxjs/toolkit from 2.13.0 to 2.14.0

Release notes

Sourced from @​reduxjs/toolkit's releases.

v2.14.0

This feature release speeds up the dispatch path and RTK Query's Api type checking, shrinks createSlice in esbuild bundles, adds RTK-owned Draft and Patch types so emitted declarations no longer reference Immer, adds removeMany({ where }) and selectByIds to the entity adapter, adds RTK Query cache entry selectors and a DevTools action sanitizer, and fixes a very long list of RTK Query lifecycle, polling, upsert, timer, hook and fetchBaseQuery bugs.

Note that we just announced our roadmap to Redux Toolkit 3.0, which includes both a large set of planned 2.x features and improvements, and planned 3.0 breaking changes. The fixes and updates in this release help pave the way for all of those efforts. We'd also appreciate feedback on the linked RTK Query usage patterns and 3.0 planned breaking changes discussion threads.

Changelog

Dispatch Performance

Every dispatched action runs through every reducer and middleware, so small costs on that path add up. We added a benchmark harness for the dispatch path and used it to find several places where RTK did work for actions it didn't care about.

createAction(...).match now compares action.type before calling isAction, so a non-matching action costs a property read. createReducer no longer allocates arrays on every dispatch to collect case and matcher reducers. Since createSlice builds its reducer with createReducer, every slice reducer gets this improvement.

The listener middleware used to copy its listener list and call every predicate for every action. It now keeps a snapshot that is rebuilt only when listeners are added or removed, and that snapshot knows which action types have type or actionCreator listeners. If an action's type isn't in that set and there are no matcher or predicate listeners, the middleware skips the loop entirely.

The RTK Query root reducer now returns the existing state for actions that none of its slices handle, instead of running all five slice reducers. It also skips rewriting a query's provided tags when the new tags are the same as the stored ones, so re-fetching a query that returns the same tags no longer creates new provided state.

Some numbers from the PR benchmarks (Node 26, ops/sec unless noted):

Scenario Before After
Listener middleware, 200 listeners, unrelated action 108K 5.34M
Listener middleware, 200 actionCreator listeners, matching action 100K 612K
createSlice, 20 slices, unrelated action 320K 394K
RTKQ store, unrelated action 352K 468K
RTKQ re-dispatch of a fulfilled query with unchanged tags, 1000 entries (ms per dispatch) 2.50 0.55

The listener middleware numbers are the biggest change, because the old cost grew with the number of listeners. Apps with a handful of listeners will see much smaller gains.

The RTK Query middleware also does less work keeping the store's subscriptions state in sync (#5499). It used to JSON-copy the whole subscriptions object and diff it with Immer every 500ms while subscriptions were changing. It now records which cache keys changed and writes one patch per key. Keys that didn't change keep their object references, so the Redux DevTools no longer receive a full copy of subscriptions on every sync. Polls, refetch() calls and tag invalidation refetches don't add subscribers, so they no longer schedule a sync at all. The visible difference: a cache key that only ever had subscribe: false requests no longer shows up as an empty {} in subscriptions.

Smaller createSlice Bundles With esbuild

createSlice references asyncThunkCreator so that create.asyncThunk works in the reducers callback. esbuild couldn't tell that the asyncThunkCreator object was free of side effects, so it always bundled createAsyncThunk along with createSlice. webpack already dropped it. We've marked it as pure, and an esbuild bundle that imports only createSlice is now about 1 kB smaller (brotli).

Faster RTK Query Api Type Checking

The Api type combines every registered module (core, React hooks, and any third-party modules) by running UnionToIntersection over the module names. TanStack Table hit the same cost with the same design, and found that writing out the known intersection and adding variance annotations helped a lot.

We've done the same thing here: Api uses the core module type directly, and ApiModules has in out variance annotations. On a test app with one ~50-endpoint createApi, type instantiations dropped 22% and check time dropped about 25% on TS 6, and about 18% on the TS 7 native preview. Third-party modules like ngrx-rtk-query saw 7-8% fewer instantiations. There are no runtime changes.

RTK-Owned Draft and Patch Types

RTK used to re-export Immer's Draft type, and used Immer's types in signatures like CaseReducer and PatchCollection. That meant the .d.ts files TypeScript generated for your slices referenced immer. With a package manager layout where immer isn't hoisted, those declarations failed to build with TS2883 (#5516). Re-exporting doesn't fix that, so RTK now declares its own Draft, WritableDraft and Patch types with the same shapes as Immer's. Emitted declarations now point at @reduxjs/toolkit instead. Our type tests check that RTK's Draft and Immer's Draft stay interchangeable, so code that mixes castDraft or current with RTK's types keeps working. We also bumped the immer dependency to ^11.2.9.

There are a few other type additions in this release:

  • ApiRootState replaces RTK Query's RootState type, which is now deprecated. RootState will be removed in 3.0.
  • TypedAddListenerAction and TypedRemoveListenerAction describe the actions that addListener and removeListener actually dispatch. The default payload type of TypedAddListener and TypedRemoveListener is now the listener options object, so addListener.match(action) no longer claims action.payload has fields like id and unsubscribe that don't exist at runtime.
  • dispatch(removeListener(...)) is typed as returning boolean and dispatch(clearAllListeners()) as returning void, matching the runtime.

... (truncated)

Commits
  • ec4a1a1 Release 2.14.0
  • 705e349 fix(toolkit): respect skipToken in infinite query triggers (#5464)
  • 6d845b7 Add simpler Basic Usage example for createListener Middleware (#4836)
  • 4bbdb3d Fix isLoading staying false when refetching after an error with no data (...
  • 3abefe7 docs(codegen): document the remaining config options (#5367)
  • 7bd07e7 docs: fix LazyInfiniteQueryTrigger docs (#5261)
  • cc1e048 docs(codegen): document the config option types in src/types.ts (#5373)
  • 9b3cb8c docs(codegen): fix malformed config options block (#5366)
  • 193bfaa docs: selectInvalidedBy for multiple cache updates across queries (#5226)
  • 687819b docs: clarify useLazyQuery data is undefined until trigger (#5348)
  • Additional commits viewable in compare view

Updates fast-xml-parser from 5.11.2 to 5.12.0

Release notes

Sourced from fast-xml-parser's releases.

v5.12.0

What's Changed

New Contributors

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.11.2...v5.12.0

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.12.0 / 2026-11-03

  • perf improvement for stop node: After the first failure in a given stop node, the function stops using readTagExp and switches to a cheap fallback.
  • devdep:jasmine 7.0
  • deps:
    • @​nodable/entities v3.1.0
    • fast-xml-builder v1.3.1
    • is-unsafe v2.0.3
    • strnum v2.5.1
  • fix cjs typing
  • fix: preserve original metadata offsets for CRLF input (#911) (By sskift)

5.11.2 / 2026-09-29

  • fix (#875): decode Uint8Array XML input as UTF-8 (By emme1t)
  • fix (#880) :type EntityDecoderOptions.setXmlVersion's version as a number (By Yevhenii Kotyrlo)

5.11.1 / 2026-08-27

  • fix: validator; Replace regex with a single-pass scanner for attribute tokens, eliminating quadratic behavior on long whitespace runs.

5.11.0 / 2026-08-16

  • feat: support for endIndex in node metadata (#850) [By Pavel Dranichnikov]
  • fix: don't crash on a closing tag with no matching opening tag (#861) [By Haïm Dimer]
  • fix: DOCTYPE to read SYSTEM/PUBLIC
  • deps: strnum v2.4.2

5.10.1 / 2026-07-17

  • fix: multiple DOCTYPE declarations.
  • deps: @nodable/entities for treeshaking

5.10.0 / 2026-07-11

  • upgrade:
    • xml-naming v0.3.0: cache support
    • PEM v1.6.2: sibling bug fix
    • is-unsafe v2.0.0: tree shaking

*5.9.3 / 2026-06-19

  • update strnum

*5.9.2 / 2026-06-17

  • dummy release to test changes in github action

*5.9.1 / 2026-06-17

  • dummy release to test release from github action

*5.9.0 / 2026-06-15

  • update strnum to 2.3.0

... (truncated)

Commits

Updates @uwdata/mosaic-core from 0.34.3 to 0.35.0

Release notes

Sourced from @​uwdata/mosaic-core's releases.

v0.35.0

What's Changed

Full Changelog: uwdata/mosaic@v0.34.3...v0.35.0

Commits

Updates @uwdata/mosaic-sql from 0.34.3 to 0.35.0

Release notes

Sourced from @​uwdata/mosaic-sql's releases.

v0.35.0

What's Changed

Full Changelog: uwdata/mosaic@v0.34.3...v0.35.0

Commits

Updates electron from 45.2.1 to 45.2.2

Release notes

Sourced from electron's releases.

electron v45.2.2

Release Notes for v45.2.2

Fixes

  • Fixed a crash when using hidden window as the parent in Wayland. #55571 (Also in 43, 44, 46)
  • Fixed removeInsertedCSS() not removing cssOrigin: 'user' stylesheets. #55538 (Also in 46)

Other Changes

  • Updated Chromium to 156.0.8078.80. #55512
  • Updated Node.js to v24.22.2. #55474
Commits

Updates lucide-react from 1.66.0 to 1.67.0

Release notes

Sourced from lucide-react's releases.

Version 1.67.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.66.0...1.67.0

Commits

Updates rimraf from 6.1.3 to 6.1.4

Commits

@dependabot
dependabot Bot requested a review from iLevyTate as a code owner November 6, 2026 23:38
@dependabot @github

dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automerge, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
build(deps): Bump the minor-and-patch group across 1 directory with 7…
648dd45 
… updates

Bumps the minor-and-patch group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) | `2.13.0` | `2.14.0` |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.11.2` | `5.12.0` |
| [@uwdata/mosaic-core](https://github.com/uwdata/mosaic) | `0.34.3` | `0.35.0` |
| [@uwdata/mosaic-sql](https://github.com/uwdata/mosaic) | `0.34.3` | `0.35.0` |
| [electron](https://github.com/electron/electron) | `45.2.1` | `45.2.2` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.66.0` | `1.67.0` |
| [rimraf](https://github.com/isaacs/rimraf) | `6.1.3` | `6.1.4` |



Updates `@reduxjs/toolkit` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](reduxjs/redux-toolkit@v2.13.0...v2.14.0)

Updates `fast-xml-parser` from 5.11.2 to 5.12.0
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.11.2...v5.12.0)

Updates `@uwdata/mosaic-core` from 0.34.3 to 0.35.0
- [Release notes](https://github.com/uwdata/mosaic/releases)
- [Commits](uwdata/mosaic@v0.34.3...v0.35.0)

Updates `@uwdata/mosaic-sql` from 0.34.3 to 0.35.0
- [Release notes](https://github.com/uwdata/mosaic/releases)
- [Commits](uwdata/mosaic@v0.34.3...v0.35.0)

Updates `electron` from 45.2.1 to 45.2.2
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v45.2.1...v45.2.2)

Updates `lucide-react` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.67.0/packages/lucide-react)

Updates `rimraf` from 6.1.3 to 6.1.4
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](isaacs/rimraf@v6.1.3...v6.1.4)

---
updated-dependencies:
- dependency-name: "@reduxjs/toolkit"
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@uwdata/mosaic-core"
  dependency-version: 0.35.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@uwdata/mosaic-sql"
  dependency-version: 0.35.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: electron
  dependency-version: 45.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: fast-xml-parser
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lucide-react
  dependency-version: 1.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: rimraf
  dependency-version: 6.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): Bump the minor-and-patch group with 7 updates build(deps): Bump the minor-and-patch group across 1 directory with 7 updates Nov 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-and-patch-65762d3d9c branch from 122e5fe to 648dd45 Compare November 7, 2026 01:09

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@iLevyTate iLevyTate Awaiting requested review from iLevyTate iLevyTate is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants