Skip to content

Upgrade @reduxjs/toolkit from 2.2.6 to 2.2.7#137

Closed
sumansaurabh wants to merge 1 commit intomainfrom
snyk-upgrade-6994816110ac192f088ee88fa8b179a7
Closed

Upgrade @reduxjs/toolkit from 2.2.6 to 2.2.7#137
sumansaurabh wants to merge 1 commit intomainfrom
snyk-upgrade-6994816110ac192f088ee88fa8b179a7

Conversation

@sumansaurabh
Copy link
Contributor

@sumansaurabh sumansaurabh commented Aug 18, 2024

User description

snyk-top-banner

Snyk has created this PR to upgrade @reduxjs/toolkit from 2.2.6 to 2.2.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Server-side Request Forgery (SSRF)
SNYK-JS-AXIOS-7361793
833 Proof of Concept
Release notes
Package name: @reduxjs/toolkit
  • 2.2.7 - 2024-07-27

    This bugfix release fixes issues with "TS type portability" errors, improves build artifact tree shaking behavior, and exports some additional TS types.

    Changelog

    TS Type Portability

    We've had a slew of issues reported around "TS type portability" errors, such as:

    The error messages are typically along the lines of:

    Type error: The inferred type of 'configureStore' cannot be named without a reference to '@ reduxjs/toolkit/node_modules/redux'. This is likely not portable. A type annotation is necessary.

    @ aryaemami59 did some deep investigation and concluded these were due to a mixture of using interface instead of type in most places, not pre-bundling our TS typedefs, and not exporting some of the unique symbols we use internally.

    Arya put together a highly detailed writeup and set of fixes in #4467: Fix: TypeScript Type Portability Issues, and that appears to resolve all of those issues we've seen. Thank you!

    Other Changes

    Arya also did significant work to improve RTK's treeshaking, tweaking internal definitions to let bundlers better separate out unused code.

    We've exported additional types like UpdateDefinitions and RetryOptions, per request.

    listenerMiddleware.withTypes() methods now allow passing in an ExtraArgument generic.

    What's Changed

    Full Changelog: v2.2.6...v2.2.7

  • 2.2.6 - 2024-06-29

    This bugfix release:

    • Brings internal useIsomorphicLayoutEffect usage in line with React Redux in React Native environments
    • Exports FetchBaseQueryArgs type
    • Fixes an issue in recent createEntityAdapter sorting perf improvements that could (in specific cases) cause Immer to throw an error

    What's Changed

    Full Changelog: v2.2.5...v2.2.6

from @reduxjs/toolkit GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • Snyk has automatically assigned this pull request, set who gets assigned.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:


Description

  • Upgraded @reduxjs/toolkit to version 2.2.7 to address vulnerabilities and improve functionality.
  • This version includes bug fixes related to TypeScript type portability and build artifact tree shaking.

Changes walkthrough 📝

Relevant files
Dependencies
package.json
Upgrade @reduxjs/toolkit to version 2.2.7                               

package.json

  • Upgraded @reduxjs/toolkit dependency from version 2.2.6 to 2.2.7.
  • +1/-1     

    Snyk has created this PR to upgrade @reduxjs/toolkit from 2.2.6 to 2.2.7.
    
    See this package in npm:
    @reduxjs/toolkit
    
    See this project in Snyk:
    https://app.snyk.io/org/sumansaurabh/project/0844fa84-ddc5-4e74-8d08-249b7c14f3a8?utm_source=github&utm_medium=referral&page=upgrade-pr
    @sumansaurabh sumansaurabh reopened this Aug 30, 2024
    @penify-dev penify-dev bot added the enhancement New feature or request label Aug 30, 2024
    @penify-dev penify-dev bot changed the title [Snyk] Upgrade @reduxjs/toolkit from 2.2.6 to 2.2.7 Upgrade @reduxjs/toolkit from 2.2.6 to 2.2.7 Aug 30, 2024
    @penify-dev
    Copy link

    penify-dev bot commented Aug 30, 2024

    PR Review 🔍

    ⏱️ Estimated effort to review [1-5]

    1, because this is a simple version upgrade with no code changes or complex logic involved.

    🧪 Relevant tests

    No

    ⚡ Possible issues

    No

    🔒 Security concerns

    No

    @penify-dev
    Copy link

    penify-dev bot commented Aug 30, 2024

    PR Code Suggestions ✨

    CategorySuggestion                                                                                                                                    Score
    Compatibility
    Verify compatibility of the new toolkit version with existing dependencies

    Ensure that the upgrade to version 2.2.7 of @reduxjs/toolkit is compatible with the rest
    of the dependencies in your project, as minor version upgrades can sometimes introduce
    breaking changes.

    package.json [17]

    -"@reduxjs/toolkit": "^2.2.6",
    +"@reduxjs/toolkit": "^2.2.7",
     
    Suggestion importance[1-10]: 8

    Why: This suggestion addresses a potential issue with dependency compatibility, which is crucial for maintaining the stability of the project after an upgrade.

    8

    @mayurDayal2000 mayurDayal2000 force-pushed the main branch 7 times, most recently from b13c613 to bd66503 Compare September 23, 2024 12:53
    @mayurDayal2000 mayurDayal2000 deleted the snyk-upgrade-6994816110ac192f088ee88fa8b179a7 branch October 2, 2024 10:49
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    3 participants