Skip to content

Bump immutable from 5.1.4 to 5.1.5 in /nav-app#759

Merged
clemiller merged 5 commits intodevelopfrom
dependabot/npm_and_yarn/nav-app/immutable-5.1.5
Apr 21, 2026
Merged

Bump immutable from 5.1.4 to 5.1.5 in /nav-app#759
clemiller merged 5 commits intodevelopfrom
dependabot/npm_and_yarn/nav-app/immutable-5.1.5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 5, 2026

Bumps immutable from 5.1.4 to 5.1.5.

Release notes

Sourced from immutable's releases.

v5.1.5

What's Changed

Full Changelog: immutable-js/immutable-js@v5.1.4...v5.1.5

Changelog

Sourced from immutable's changelog.

5.1.5

  • Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
Commits
  • b37b855 5.1.5
  • 16b3313 Merge commit from fork
  • fd2ef49 fix new proto key injection
  • 6734b7b fix Prototype Pollution in mergeDeep, toJS, etc.
  • 6f772de Merge pull request #2175 from immutable-js/dependabot/npm_and_yarn/rollup-4.59.0
  • 5f3dc61 Bump rollup from 4.34.8 to 4.59.0
  • 049a594 Merge pull request #2173 from immutable-js/dependabot/npm_and_yarn/lodash-4.1...
  • 2481a77 Merge pull request #2172 from mrazauskas/update-tstyche
  • eb04779 Bump lodash from 4.17.21 to 4.17.23
  • b973bf3 format
  • Additional commits viewable in compare view

clemiller and others added 3 commits January 20, 2026 10:34
Bumps [qs](https://github.com/ljharb/qs) from 6.14.0 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.0...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 5, 2026
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Mar 5, 2026

@clemiller clemiller changed the base branch from master to develop April 21, 2026 15:11
@clemiller
Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [immutable](https://github.com/immutable-js/immutable-js) from 5.1.4 to 5.1.5.
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v5.1.4...v5.1.5)

---
updated-dependencies:
- dependency-name: immutable
  dependency-version: 5.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the base branch from develop to master April 21, 2026 15:23
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nav-app/immutable-5.1.5 branch from f48d81c to e08dd17 Compare April 21, 2026 15:23
@sonarqubecloud
Copy link
Copy Markdown

@clemiller clemiller changed the base branch from master to develop April 21, 2026 15:27
@clemiller clemiller merged commit 0414afd into develop Apr 21, 2026
3 checks passed
@clemiller clemiller deleted the dependabot/npm_and_yarn/nav-app/immutable-5.1.5 branch April 21, 2026 15:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant