[dependabot]

Bumps the npm-minor-patch group with 2 updates in the / directory: @reduxjs/toolkit and @tanstack/react-virtual.

Updates @reduxjs/toolkit from 2.12.0 to 2.13.0

Release notes

Sourced from @​reduxjs/toolkit's releases.

v2.13.0

This feature release updates our build tooling to TSDown and PNPM, adds official TypeScript 7 support, and includes a long list of bugfixes across RTK Query, createAsyncThunk, createEntityAdapter, and combineSlices.

Changelog

Build Tooling Updates

We've fully modernizing modernized our build tooling across all of the Redux repos. That included switching from Yarn to PNPM, ESLint to Oxlint, Prettier to Oxfmt, and TSUp to TSDown.

The part that matters for users is that we now build the package with TSDown instead of tsup. The package layout, exports definitions, and exported APIs are all unchanged from 2.12. We've checked the new build with attw, and verified that CJS and ESM entry points load in both dev and prod builds, and that the legacy-esm artifacts still target ES2017. The contents of the bundles do look a bit different (smaller CJS artifacts, slightly different helper output in the legacy-esm files). If you see any behavior differences that look build-related, please file an issue!

This is also our first release published via the updated PNPM-based workflow, still using NPM Trusted Publishing. We've also added pkg.pr.new previews for every commit, so you can try out a PR build before it's released.

Docs Updates

We've shipped a new combined Redux libraries docs site! The core docs site at https://redux.js.org now contains the docs for all of our libraries: Redux core and usage guides, Redux Toolkit, React Redux, and Reselect. The prior standalone docs sites for RTK, R-R, and Reselect now redirect to their respective sections of the combined docs. We've also done a major cleanup pass on the docs, deduplicating pages that had similarities (like the Next.js or RTK2 migration pages that lived in both the core and RTK docs), and updating outdated content (modernizing example code snippets, deleting dead links, and making RTK and hooks the default patterns shown). The RTK content now lives at https://redux.js.org/toolkit/ .

TypeScript 7 Support

TS 7.0 (the native Go port) is now out! We fixed the remaining type errors in RTK when checked by TS 7.0 and 7.1, and TS 7.0 is now part of our CI test matrix.

Per our TS support policy of matching DefinitelyTyped's support window, we've also updated our support matrix to TS 5.6+. As always, RTK may still work with earlier versions, but we no longer test against them.

RTK Query Fixes

useQueryState (and thus useQuery) was passing a new inline selector to useSelector on every render, and also reading the store directly during render. The selector is now memoized, and the direct store read is gone. This also fixes a bug where isSuccess could flip from false to true on an unrelated re-render while a query was refetching after an error. isSuccess now correctly stays false in that case.

data now reflects cache updates made via updateQueryData while a refetch is in flight, instead of showing the previous result.

Polling now reads the current cache state when each poll fires, rather than the state at the time the poll was scheduled. This means skipPollingIfUnfocused respects focus loss that happens after scheduling, and polls stop if their cache entry was removed.

We fixed a race where a duplicate query request rejected by the thunk condition could cause queued tag invalidations to run too early and be lost, leaving stale data in the cache.

Tags with falsy ids like 0 now invalidate and clean up correctly.

Lazy query hooks now re-subscribe correctly when effects restart while the hook state is preserved, such as with Fast Refresh or <Activity>.

Infinite queries no longer trigger onQueryStarted when fetching past the end of the list, and the infinite query hook result type now includes the page error flags.

fetchBaseQuery only treats a URL as absolute if it starts with a scheme.

We also fixed an error when rehydrating state for an endpoint name that has no definition.

Other Fixes

createAsyncThunk no longer swallows aborts that happen before the pending action is dispatched, and now correctly sets rejectedWithValue when rejectWithValue is called with a falsy payload.

createEntityAdapter's setAll now keeps the last item when given duplicate IDs, matching setMany. The sorted adapter's updateMany now merges multiple updates for the same ID before applying them.

combineSlices now keeps its internal state proxy cache per instance, so multiple combined reducers no longer interfere with each other.

... (truncated)

Commits

• 370f7eb Release 2.13.0
• 8c40241 Fix release-it commands for PNPM
• 483f0fb Fix unstable selector reference inside of useQueryState and isSuccess dur...
• 62103f5 Fix TS7 errors and update TS matrix (#5455)
• 71db2d4 Fetch the other libraries' docs from master in previews (#5454)
• 0eeae5c Convert Redux Toolkit docs to the combined site format (#5451)
• c9dac93 docs: clarify browser ESM import map usage (#5375)
• 00b133f fix(toolkit): handle circular references in immutable state middleware (#5433)
• ded675e docs site: fix pagefind search by preloading window.pagefind (#5447)
• 322c01a Reinstate lazy queries after preserved effects restart (#5424)
• Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.24 to 3.14.25

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.25

Patch Changes

• Updated dependencies [9d7ff67]:
  • @​tanstack/virtual-core@​3.19.10

Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.25

Patch Changes

• Updated dependencies [9d7ff67]:
  • @​tanstack/virtual-core@​3.19.10

Commits

• 0a368c7 ci: Version Packages (#1358)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Updates @reduxjs/toolkit from 2.12.0 to 2.13.0 and @tanstack/react-virtual from 3.14.24 to 3.14.25.

The @reduxjs/toolkit feature release fixes RTK Query bugs: useQueryState no longer recreates its selector on every render, isSuccess stays false on unrelated re-renders during refetch, polling reads current cache state instead of the scheduled state, and falsy tag IDs like 0 invalidate correctly. The build tooling switched from tsup to TSDown; the public API and exports are unchanged. The package now officially supports TypeScript 5.6+.

@tanstack/react-virtual is a patch bump that updates the underlying @tanstack/virtual-core.

^{Written for commit e7ff760. Summary will update on new commits.}

[codeant-ai]

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: qnbs/WorldScript-Studio
• Branch: main
• File: .coderabbit.yaml
• Commit: d9c02fc
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 27c72c27-0fb8-4c15-80fa-bfc472338f1b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​tanstack/​react-virtual@​3.14.24 ⏵ 3.14.25

View full report

[codescene-access]

No application code in the PR — skipped Code Health checks.

See analysis details in CodeScene

Quality Gate Profile: The Bare Minimum
Install CodeScene MCP: safeguard and uplift AI-generated code. Catch issues early with our IDE extension and CLI tool.

[codeant-ai]

  CodeAnt Quality Gate Results

_{Commit e7ff760c · Scanned Nov 08, 2026 at 17:07 UTC}

✅  Overall Status: PASSED

Quality Gate	Status	Details
New code coverage	⚪  Not applicable	Not applicable — no applicable code changes
Secrets	✅  Passed	0 secrets found, 2 false positive secrets suppressed
Duplicate code	✅  Passed	0.0% duplicated
SAST	✅  Passed	No security issues
Bugs	✅  Passed	Rating S · No bugs
IaC	✅  Passed	Rating S · No issues

[codeant-ai]

  CodeAnt Coverage Report

_{Commit e7ff760c · Scanned Nov 08, 2026 at 17:07 UTC}

⚪  Overall Status: Not applicable

Coverage	Status	Details
New Code Coverage	⚪  Not applicable	Not applicable — no applicable code changes

New-code coverage threshold not configured; coverage is reported but not enforced.

[qnbs]

Independent release-freeze / regression HOLD — 2026-11-08

Dependabot opened this new grouped PR #1204 (head e7ff760cd2a2777c32b25c176dc1931bbc250748, base main=d9c02fc9426fb4da42fae63fbcc5d9139a20bb07) after closing former #1195 unmerged at 2026-11-08T17:06:24Z. This PR upgrades @reduxjs/toolkit 2.12.0 → 2.13.0 and separately @tanstack/react-virtual 3.14.24 → 3.14.25 (+ virtual-core 3.19.9→3.19.10).

NOT ADMITTED for v1.29.3: hold the whole grouped PR #1204. Redux Toolkit 2.13.0 remains explicitly pinned at 2.12.0 in the now-merged v1.29.3 candidate, because #1183 requires independent exact-contract qualification of prototype-named entity IDs and Recharts/adapter behavior. A green Dependabot CI, rebased head, or bundling with an apparently safe TanStack patch does not constitute that domain regression proof. The staged release docs and changelog explicitly exclude RTK 2.13.0.

Sole local Codex CLI: avoid merging/rebasing this bot PR into the release candidate or modifying the frozen main dependency graph before tag. Defer until AFTER verified v1.29.3 publication; separately evaluate and, if desirable, isolate TanStack patch from held RTK under its own focused gated/signed PR rather than accepting grouped upgrade. Preserve #1183 evidence and no auto-merge. Run and record dedicated prototype-ID/createEntityAdapter collision, serialization and affected Recharts scenario regression proofs before any later RTK 2.13.0 admission; no forced history edits or release scope expansion.

New candidate main=d9c02fc9 entered postmerge CI #42502903805, CodeQL #42502903661 SUCCESS, Vercel Production exact SHA READY; actual candidate 3-OS/signature and OSV qualification is pending. Release owner #1201. This comment is review/policy coordination only and is not an approval or code mutation.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[codecov]

Bundle Report

Changes will increase total bundle size by 123.2MB (100.0%) ⬆️⚠️, exceeding the configured threshold of 5%.

Bundle name	Size	Change
worldscript-studio-web-esm	123.2MB	123.2MB (100%) ⬆️⚠️