Skip to content

Bump immutable to ^4.3.8#2113

Open
shakyShane wants to merge 8 commits into
masterfrom
chore/immutable-4.3.8
Open

Bump immutable to ^4.3.8#2113
shakyShane wants to merge 8 commits into
masterfrom
chore/immutable-4.3.8

Conversation

@shakyShane
Copy link
Copy Markdown
Contributor

@shakyShane shakyShane commented May 9, 2026

Fixes #2111

Immutable 4 + mergeDeep/plain collection handling; TLS opts avoid fromJS on Buffers.

shakyShane and others added 8 commits May 9, 2026 08:22
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
…Deep)

Coerce proxy config through Map/fromJS like other transforms.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Node 26 loads yargs as ESM; yargs 16 shim used require() and broke lerna bootstrap.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Immutable used by browser-sync is vulnerable to Prototype Pollution

1 participant