Skip to content

Update dependency immutable to ~3.8.3#32

Open
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/immutable-3.x
Open

Update dependency immutable to ~3.8.3#32
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/immutable-3.x

Conversation

@dev-mend-for-github-com

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change
immutable (source) dependencies minor ~3.7.4~3.8.3

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability
High High 8.7 CVE-2026-29063

Release Notes

immutable-js/immutable-js (immutable)

v3.8.3

Compare Source

Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

v3.8.2

Compare Source

Released in 2017, still the most commonly used release.

v3.8.1

Compare Source

Minor touch ups discovered after the last release, plus a few more bug fixes! Plus, you can now contribute to immutable-js using the latest version of node.

New:

  • The methods keyOf, findKey, lastKeyOf, and findLastKey were moved from KeyedIterable to Iterable, so they may be also used on Lists and Sets. (#​740)

Fixes:

  • Some issues with the flow definitions have been polished out thanks to @​marudor. (#​840, #​841, #​845)
  • Collections which contain Symbol keys or values can now be stringified. (#​620)
  • Negative indexing into the keySeq of an IndexedIterable returns correct results. (#​811)
  • Can use the value Infinity as a key in a Collection without crashing. (#​797)

v3.8.0

Compare Source

Whoa, a new version of Immutable! The big news is that we now export types for both Flow and TypeScript in the npm module! Also that pesky length warning has finally been fully removed. There are also a good amount of small bug fixes and performance improvements. Finally, the API docs have been improved greatly! Check it out http://facebook.github.io/immutable-js/docs/.

A huge huge thanks to everyone in the community for contributing these improvements. The large majority of work cited below is community contributions.

New:

  • Now exports Flow types (#​805)
  • Now exports typings for TypeScript use. (#​808)
  • Cursor TypeScript definitions (#​765)
  • No longer warns when accessing length property of a collection. (88f880f)
  • Map.of() takes key, value interleaved pairs (#​727)
  • findEntry and findLastEntry now respect notSetValue argument (#​822)

Fixes:

  • Iterable::take(Infinity) takes infinitely instead of 0 (#​834)
  • Proper toOrderedMap and toOrderedSet method definitions (#​761)
  • Records return themselves for no-op Record#set calls for better performance (#​795)
  • Range#toString propertly reports step (#​759)
  • Add missing Set#contains (96b0946)

v3.7.6

Compare Source

A few minor bug fixes:

  • Fixed issue where lastIndexOf did not always return the correct value #​703
  • mergeDeep now has more opportunities to for the "return self" optimization, saving memory #​690
  • The TypeScript .d.ts file now aligns with the outputted file for the variations of Immutable Iterables. #​647
  • Ensure behavior for slice(0, NaN) is equivalent to that of JS Array #​623
  • Ensure ES6 Symbol can be properly hashed #​579

And a new API method:

v3.7.5

Compare Source

Many stability improvements thanks to excellent community submitted fixes.

New:

  • Cursor can now set(value) #​516 to replace the value at the cursor.

Fixes:

  • Ensure all tests pass in node v0.12
  • All operations that accept indicies now use ECMA's algorithm for converting input to integers when possible. #​545 #​598
  • Fix issue where slice/splice with non-number arguments could result in infinite recursion. #​511
  • Clearer documentation regarding creating Map from JS Obj #​589
  • Immutable now exported as a TypeScript module #​567
  • Trailing commas causing issues in IE8 #​510
  • Fix memory leak from setSize() and slice() #​540
  • Union and Merge of Map or Set always favors the type of the left hand side #​515

  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github-com dev-mend-for-github-com Bot added the security fix Security fix generated by Mend label May 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants