Skip to content

Bump deepmerge from 3.3.0 to 4.3.0#73

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/deepmerge-4.3.0
Open

Bump deepmerge from 3.3.0 to 4.3.0#73
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/deepmerge-4.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jan 30, 2023

Bumps deepmerge from 3.3.0 to 4.3.0.

Changelog

Sourced from deepmerge's changelog.

4.3.0

  • Avoid thrown errors if the target doesn't have propertyIsEnumerable. #252

4.2.2

  • isMergeableObject is now only called if there are two values that could be merged. a34dd4d2

4.2.1

  • Fix: falsey values can now be merged. #170

4.2.0

  • Properties are now only overwritten if they exist on the target object and are enumerable. #164

Technically this could probably be a patch release since "which properties get overwritten" wasn't documented and accidentally overwriting a built-in function or some function up the property chain would almost certainly be undesirable, but it feels like a gray area, so here we are with a feature version bump.

4.1.2

  • Rolled back #167 since Object.assign breaks ES5 support. 55067352

4.1.1

  • The options argument is no longer mutated #167

4.1.0

  • cloneUnlessOtherwiseSpecified is now exposed to the arrayMerge function #165

4.0.0

  • The main entry point in package.json is now a CommonJS module instead of a UMD module #155
Commits
  • 234ecd8 4.3.0
  • 3ccba99 wtf npm
  • 29ace5d Changelog for 4.3.0
  • cb81e0b new lockfile version hooray
  • 4eb9cac Merge pull request #252 from wildlyinaccurate/patch-1
  • 4d8537a Merge pull request #253 from tuananh/patch-1
  • bae690e ci: add node v18 to test matrix
  • eb7066b Prevent getEnumerableOwnPropertySymbols from throwing when target.propertyIsE...
  • e5a2771 Merge pull request #235 from phanect/travis-nodejs-versions
  • 6614715 Re-add node v8 & v10 to testing
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [deepmerge](https://github.com/TehShrike/deepmerge) from 3.3.0 to 4.3.0.
- [Release notes](https://github.com/TehShrike/deepmerge/releases)
- [Changelog](https://github.com/TehShrike/deepmerge/blob/master/changelog.md)
- [Commits](TehShrike/deepmerge@v3.3.0...v4.3.0)

---
updated-dependencies:
- dependency-name: deepmerge
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants