Skip to content

Bump deepmerge from 3.3.0 to 4.2.2#17

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/deepmerge-4.2.2
Open

Bump deepmerge from 3.3.0 to 4.2.2#17
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/deepmerge-4.2.2

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 30, 2021

Bumps deepmerge from 3.3.0 to 4.2.2.

Changelog

Sourced from deepmerge's changelog.

4.2.2

  • isMergeableObject is now only called if there are two values that could be merged. a34dd4d2

4.2.1

  • Fix: falsey values can now be merged. #170

4.2.0

  • Properties are now only overwritten if they exist on the target object and are enumerable. #164

Technically this could probably be a patch release since "which properties get overwritten" wasn't documented and accidentally overwriting a built-in function or some function up the property chain would almost certainly be undesirable, but it feels like a gray area, so here we are with a feature version bump.

4.1.2

  • Rolled back #167 since Object.assign breaks ES5 support. 55067352

4.1.1

  • The options argument is no longer mutated #167

4.1.0

  • cloneUnlessOtherwiseSpecified is now exposed to the arrayMerge function #165

4.0.0

  • The main entry point in package.json is now a CommonJS module instead of a UMD module #155
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 30, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants