[dependabot]

Bumps the safe group with 4 updates: @reduxjs/toolkit, @storybook/cli, pg and wait-on.

Updates @reduxjs/toolkit from 2.12.0 to 2.13.0

Release notes

Sourced from @​reduxjs/toolkit's releases.

v2.13.0

This feature release updates our build tooling to TSDown and PNPM, adds official TypeScript 7 support, and includes a long list of bugfixes across RTK Query, createAsyncThunk, createEntityAdapter, and combineSlices.

Changelog

Build Tooling Updates

We've fully modernizing modernized our build tooling across all of the Redux repos. That included switching from Yarn to PNPM, ESLint to Oxlint, Prettier to Oxfmt, and TSUp to TSDown.

The part that matters for users is that we now build the package with TSDown instead of tsup. The package layout, exports definitions, and exported APIs are all unchanged from 2.12. We've checked the new build with attw, and verified that CJS and ESM entry points load in both dev and prod builds, and that the legacy-esm artifacts still target ES2017. The contents of the bundles do look a bit different (smaller CJS artifacts, slightly different helper output in the legacy-esm files). If you see any behavior differences that look build-related, please file an issue!

This is also our first release published via the updated PNPM-based workflow, still using NPM Trusted Publishing. We've also added pkg.pr.new previews for every commit, so you can try out a PR build before it's released.

Docs Updates

We've shipped a new combined Redux libraries docs site! The core docs site at https://redux.js.org now contains the docs for all of our libraries: Redux core and usage guides, Redux Toolkit, React Redux, and Reselect. The prior standalone docs sites for RTK, R-R, and Reselect now redirect to their respective sections of the combined docs. We've also done a major cleanup pass on the docs, deduplicating pages that had similarities (like the Next.js or RTK2 migration pages that lived in both the core and RTK docs), and updating outdated content (modernizing example code snippets, deleting dead links, and making RTK and hooks the default patterns shown). The RTK content now lives at https://redux.js.org/toolkit/ .

TypeScript 7 Support

TS 7.0 (the native Go port) is now out! We fixed the remaining type errors in RTK when checked by TS 7.0 and 7.1, and TS 7.0 is now part of our CI test matrix.

Per our TS support policy of matching DefinitelyTyped's support window, we've also updated our support matrix to TS 5.6+. As always, RTK may still work with earlier versions, but we no longer test against them.

RTK Query Fixes

useQueryState (and thus useQuery) was passing a new inline selector to useSelector on every render, and also reading the store directly during render. The selector is now memoized, and the direct store read is gone. This also fixes a bug where isSuccess could flip from false to true on an unrelated re-render while a query was refetching after an error. isSuccess now correctly stays false in that case.

data now reflects cache updates made via updateQueryData while a refetch is in flight, instead of showing the previous result.

Polling now reads the current cache state when each poll fires, rather than the state at the time the poll was scheduled. This means skipPollingIfUnfocused respects focus loss that happens after scheduling, and polls stop if their cache entry was removed.

We fixed a race where a duplicate query request rejected by the thunk condition could cause queued tag invalidations to run too early and be lost, leaving stale data in the cache.

Tags with falsy ids like 0 now invalidate and clean up correctly.

Lazy query hooks now re-subscribe correctly when effects restart while the hook state is preserved, such as with Fast Refresh or <Activity>.

Infinite queries no longer trigger onQueryStarted when fetching past the end of the list, and the infinite query hook result type now includes the page error flags.

fetchBaseQuery only treats a URL as absolute if it starts with a scheme.

We also fixed an error when rehydrating state for an endpoint name that has no definition.

Other Fixes

createAsyncThunk no longer swallows aborts that happen before the pending action is dispatched, and now correctly sets rejectedWithValue when rejectWithValue is called with a falsy payload.

createEntityAdapter's setAll now keeps the last item when given duplicate IDs, matching setMany. The sorted adapter's updateMany now merges multiple updates for the same ID before applying them.

combineSlices now keeps its internal state proxy cache per instance, so multiple combined reducers no longer interfere with each other.

... (truncated)

Commits

• 370f7eb Release 2.13.0
• 8c40241 Fix release-it commands for PNPM
• 483f0fb Fix unstable selector reference inside of useQueryState and isSuccess dur...
• 62103f5 Fix TS7 errors and update TS matrix (#5455)
• 71db2d4 Fetch the other libraries' docs from master in previews (#5454)
• 0eeae5c Convert Redux Toolkit docs to the combined site format (#5451)
• c9dac93 docs: clarify browser ESM import map usage (#5375)
• 00b133f fix(toolkit): handle circular references in immutable state middleware (#5433)
• ded675e docs site: fix pagefind search by preloading window.pagefind (#5447)
• 322c01a Reinstate lazy queries after preserved effects restart (#5424)
• Additional commits viewable in compare view

Updates @storybook/cli from 10.6.0 to 10.6.1

Release notes

Sourced from @​storybook/cli's releases.

v10.6.1

10.6.1

• Addon A11y: Fix vision simulator color filters in Firefox - #36153, thanks @​ghengeveld!
• Addon Vitest: Support Vitest 5 browser tests - #36270, thanks @​valentinpalkovic!
• CLI: Fix vitest ERESOLVE on fresh Next.js apps. - #36310, thanks @​obvious-autobuild!
• Core: Fix build crash when ref reachability check fails mid-request - #36181, thanks @​shilman!
• Core: Restore the change-detection CTA in the sidebar - #36214, thanks @​ghengeveld!
• TanStack: Support both interpolatePath signatures - #36333, thanks @​BaconMan1168!
• Telemetry: One tools-command record per invocation with CLI toolset and tool names - #36210, thanks @​kasperpeulen!

Changelog

Sourced from @​storybook/cli's changelog.

10.6.1

• Addon A11y: Fix vision simulator color filters in Firefox - #36153, thanks @​ghengeveld!
• Addon Vitest: Support Vitest 5 browser tests - #36270, thanks @​valentinpalkovic!
• CLI: Fix vitest ERESOLVE on fresh Next.js apps. - #36310, thanks @​obvious-autobuild!
• Core: Fix build crash when ref reachability check fails mid-request - #36181, thanks @​shilman!
• Core: Restore the change-detection CTA in the sidebar - #36214, thanks @​ghengeveld!
• TanStack: Support both interpolatePath signatures - #36333, thanks @​BaconMan1168!
• Telemetry: One tools-command record per invocation with CLI toolset and tool names - #36210, thanks @​kasperpeulen!

Commits

• a17b725 Bump version from "10.6.0" to "10.6.1" [skip ci]
• See full diff in compare view

Updates pg from 8.23.0 to 8.23.1

Changelog

Sourced from pg's changelog.

All major and minor releases are briefly explained below.

For richer information consult the commit log on github with referenced pull requests.

We do not include break-fix version release in this file.

Commits

• 0980cef Publish
• 2759b2c fix(pg): run a named statement with an empty text more than once (#3781)
• 7feb7df fix(pg): expose detail and hint on errors from the native client (#3780)
• 9683053 fix(pg): do not treat Sync as connection ending (#3772)
• 4589038 fix: validate server certificate against host when connecting to an IP addres...
• 9808955 cleanup: Fix typo in comment
• 2b02f64 fix: avoid mutating query config (#3720)
• 0cef6af Reject portal based queries in pipeline mode instead of misrouting rows (#3737)
• 2991480 Deprecate serializing invalid Dates (#3731)
• c940d7c Fail pipelined queries when the connection dies instead of hanging (#3736)
• Additional commits viewable in compare view

Updates wait-on from 9.1.0 to 9.5.1

Release notes

Sourced from wait-on's releases.

v9.5.1

9.5.1 (2026-09-29)

Bug Fixes

• deps: upgrade dependencies to address vulnerabilities (6d6f488)

v9.5.0

9.5.0 (2026-09-29)

Features

• cli: add --status-codes flag to accept non-2XX http statuses (46efb67), closes #187 #49

v9.4.1

9.4.1 (2026-09-29)

Bug Fixes

• types: restore @​types/wait-on compatibility (callback err?: Error, aliases) (348126a), closes jeffbski/wait-on#250 jeffbski/wait-on#250
• types: widen headers to accept number and boolean values (#250) (3c15038)

v9.4.0

9.4.0 (2026-09-28)

Features

• add command resource (15e2d99)
• command: serialize execs and add per-attempt commandTimeout (4af2299), closes #88

v9.3.0

9.3.0 (2026-09-28)

Features

• accept a string or string array as waitOn opts (7f7358e), closes #61 #61
• add TypeScript definitions (496b2d5)
• string-opts overload and type-check test for the TS defs (0fab870), closes jeffbski/wait-on#197

v9.2.0

9.2.0 (2026-09-28)

Bug Fixes

... (truncated)

Commits

• 9b8c532 chore(release): 9.5.1 [skip ci]
• a22f389 Merge pull request #254 from jeffbski/mocha-12
• 6d6f488 fix(deps): upgrade dependencies to address vulnerabilities
• c8c4b3b chore(release): 9.5.0 [skip ci]
• 2f052a2 Merge pull request #253 from kevinold/feat/cli-status-codes
• 6398c73 test(cli): pin --status-codes 100/599 bounds and 3-digit floor
• 46efb67 feat(cli): add --status-codes flag to accept non-2XX http statuses
• fde3da4 Merge pull request #249 from kevinold/docs/agents-md-wait-on
• 12827a8 chore(release): 9.4.1 [skip ci]
• c2c0562 Merge pull request #252 from kevinold/fix/types-callback-compat-headers
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for wait-on since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions