Skip to content

build(deps): bump immutable from 4.3.0 to 4.3.8 in /addons#1244

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/addons/immutable-4.3.8
Closed

build(deps): bump immutable from 4.3.0 to 4.3.8 in /addons#1244
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/addons/immutable-4.3.8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 4, 2026

Bumps immutable from 4.3.0 to 4.3.8.

Release notes

Sourced from immutable's releases.

v4.3.8

Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

v4.3.7

What's Changed

Full Changelog: immutable-js/immutable-js@v4.3.6...v4.3.7

v4.3.6

What's Changed

Internals

New Contributors

Full Changelog: immutable-js/immutable-js@v4.3.5...v4.3.6

v4.3.5

What's Changed

New Contributors

Full Changelog: immutable-js/immutable-js@v4.3.4...v4.3.5

4.3.4

What's Changed

Full Changelog: immutable-js/immutable-js@v4.3.3...v4.3.4

v4.3.3

What's Changed

... (truncated)

Changelog

Sourced from immutable's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning. Dates are formatted as YYYY-MM-DD.

Unreleased

5.1.5

  • Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

5.1.4

Documentation

Internal

5.1.3

TypeScript

Documentation

There has been a huge amount of changes in the documentation, mainly migrate from an autogenerated documentation from .d.ts file, to a proper documentation in markdown. The playground has been included on nearly all method examples. We added a page about browser extensions too: https://immutable-js.com/browser-extension/

Internal

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for immutable since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 4, 2026
@meta-cla meta-cla bot added the CLA Signed label Mar 4, 2026
@meta-codesync
Copy link
Copy Markdown

meta-codesync bot commented Mar 4, 2026

@facebook-github-bot has imported this pull request. If you are a Meta employee, you can view this in D95272613. (Because this pull request was imported automatically, there will not be any future comments.)

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/immutable-4.3.8 branch from 56bebd3 to 7e87c67 Compare March 24, 2026 20:50
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/immutable-4.3.8 branch from 7e87c67 to 44e90cb Compare March 30, 2026 15:48
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/immutable-4.3.8 branch from 44e90cb to f47fc47 Compare March 30, 2026 19:21
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/immutable-4.3.8 branch from f47fc47 to d0524ac Compare April 2, 2026 17:44
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

@bherila
Copy link
Copy Markdown
Contributor

bherila commented Apr 2, 2026

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/immutable-4.3.8 branch from d0524ac to 6380d92 Compare April 2, 2026 22:00
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

Bumps [immutable](https://github.com/immutable-js/immutable-js) from 4.3.0 to 4.3.8.
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v4.3.0...v4.3.8)

---
updated-dependencies:
- dependency-name: immutable
  dependency-version: 4.3.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/addons/immutable-4.3.8 branch from 6380d92 to 1b5d4dc Compare April 3, 2026 04:23
@facebook-github-tools
Copy link
Copy Markdown

@dependabot[bot] has updated the pull request. You must reimport the pull request before landing.

@meta-codesync meta-codesync bot closed this in 472349a Apr 7, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 7, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/addons/immutable-4.3.8 branch April 7, 2026 17:53
@meta-codesync
Copy link
Copy Markdown

meta-codesync bot commented Apr 7, 2026

This pull request has been merged in 472349a.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code Merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant