Skip to content

chore(deps): bump immutable from 4.0.0-rc.15 to 4.3.8 in /solidity/random-beacon - #3879

Merged
piotr-roslaniec merged 1 commit into
mainfrom
dependabot/npm_and_yarn/solidity/random-beacon/immutable-4.3.8
May 23, 2026
Merged

chore(deps): bump immutable from 4.0.0-rc.15 to 4.3.8 in /solidity/random-beacon#3879
piotr-roslaniec merged 1 commit into
mainfrom
dependabot/npm_and_yarn/solidity/random-beacon/immutable-4.3.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 5, 2026

Copy link
Copy Markdown
Contributor

Bumps immutable from 4.0.0-rc.15 to 4.3.8.

Release notes

Sourced from immutable's releases.

v4.3.8

Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

v4.3.7

What's Changed

Full Changelog: immutable-js/immutable-js@v4.3.6...v4.3.7

v4.3.6

What's Changed

Internals

New Contributors

Full Changelog: immutable-js/immutable-js@v4.3.5...v4.3.6

v4.3.5

What's Changed

New Contributors

Full Changelog: immutable-js/immutable-js@v4.3.4...v4.3.5

4.3.4

What's Changed

Full Changelog: immutable-js/immutable-js@v4.3.3...v4.3.4

v4.3.3

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for immutable since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 5, 2026
@piotr-roslaniec

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [immutable](https://github.com/immutable-js/immutable-js) from 4.0.0-rc.15 to 4.3.8.
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v4.0.0-rc.15...v4.3.8)

---
updated-dependencies:
- dependency-name: immutable
  dependency-version: 4.3.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/solidity/random-beacon/immutable-4.3.8 branch from e0ffa73 to 8afebcb Compare May 23, 2026 09:25

@piotr-roslaniec piotr-roslaniec left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM — patch/transitive bump, no API surface changes touched.

@piotr-roslaniec
piotr-roslaniec merged commit de919f8 into main May 23, 2026
29 checks passed
@piotr-roslaniec
piotr-roslaniec deleted the dependabot/npm_and_yarn/solidity/random-beacon/immutable-4.3.8 branch May 23, 2026 09:42
piotr-roslaniec added a commit to lionakhnazarov/keep-core that referenced this pull request May 23, 2026
Mirrors recent dependabot bumps on main:
- handlebars 4.7.7 -> 4.7.9 (random-beacon threshold-network#3916, prototype pollution fix)
- immutable 4.0.0-rc.15 -> 4.3.8 (random-beacon threshold-network#3879)

Added as Yarn 4 resolutions in both random-beacon and ecdsa to keep parity
across solidity workspaces and avoid post-merge dependabot churn.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant