Skip to content

Bump immer from 10.1.3 to 11.1.9 in /frontend#161

Merged
jbouder merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/immer-11.1.9
Jul 1, 2026
Merged

Bump immer from 10.1.3 to 11.1.9 in /frontend#161
jbouder merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/immer-11.1.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps immer from 10.1.3 to 11.1.9.

Release notes

Sourced from immer's releases.

v11.1.9

11.1.9 (2026-07-01)

Bug Fixes

  • prevent prototype pollution via constructor.prototype access (CVE-2026-XXXX) (#1259) (48fc378)

v11.1.8

11.1.8 (2026-05-08)

Bug Fixes

  • update current and original typings to assert draft value is unwrapped (#1236) (bf2d154)

v11.1.7

11.1.7 (2026-05-06)

Bug Fixes

  • improve higher order type inference for WritableDraft (#1205) (7390d6c)

v11.1.6

11.1.6 (2026-05-04)

Bug Fixes

v11.1.5

11.1.5 (2026-05-04)

Bug Fixes

  • handle nested proxies after spreading and inserting into an array (d3bc436)

v11.1.4

11.1.4 (2026-02-10)

Bug Fixes

  • handle nested proxies after spreading and inserting into an array (90a7765)

v11.1.3

11.1.3 (2025-12-29)

... (truncated)

Commits
  • 48fc378 fix: prevent prototype pollution via constructor.prototype access (CVE-2026-X...
  • bf2d154 fix: update current and original typings to assert draft value is unwrapped (...
  • 7390d6c fix: improve higher order type inference for WritableDraft (#1205)
  • 5155a33 chore: regression tests for fixed issue #916 (#1215)
  • b67db83 chore(deps): bump postcss from 8.4.31 to 8.5.13 in /website (#1233)
  • b40b04f fix: remove invalid curried producer type (#1216)
  • 4f1a96f chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 (#1225)
  • 3b6c372 chore(deps): bump brace-expansion from 1.1.12 to 1.1.14 in /website (#1234)
  • 229c8fb chore(deps): bump lodash from 4.17.21 to 4.18.1 in /website (#1223)
  • 48f239c chore(deps): bump lodash from 4.17.21 to 4.18.1 in /website (#1223)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for immer since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
Bumps [immer](https://github.com/immerjs/immer) from 10.1.3 to 11.1.9.
- [Release notes](https://github.com/immerjs/immer/releases)
- [Commits](immerjs/immer@v10.1.3...v11.1.9)

---
updated-dependencies:
- dependency-name: immer
  dependency-version: 11.1.9
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/immer-11.1.9 branch from e0d29fa to 8b10d07 Compare July 1, 2026 22:16
@jbouder jbouder merged commit dbaeb57 into main Jul 1, 2026
9 checks passed
@jbouder jbouder deleted the dependabot/npm_and_yarn/frontend/immer-11.1.9 branch July 1, 2026 22:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant