Packages

immer

11.2.9 · 22 Oct 2026MIT89.4M / weekRepositoryHomepagenpmAtom feed

Upgrading immer From 7.0.12 to 9.0.6

15 releases in betweenevery note read

Reading releases, release notes and advisories…

Other targets from 7.0.12Newest 7.x7.0.15Latest11.2.9
  1. 7.0.12yours
  2. 3 releases
  3. 8.0.0major
  4. 8.0.1security
  5. 3 releases
  6. 9.0.0major
  7. 5 releases
  8. 9.0.6target
3
changes to make
3
advisories fixed
4
new
12
fixes

Before you upgrade

Tick each one off as you go
  • breaking9.0.0
  • breaking9.0.0
  • breaking8.0.0

Security

Fixes 3 advisories affecting 7.0.12

  • security: Follow up on CVE-2020-28477 where path: [["__proto__"], "x"] could still pollute the prototype

    9.0.6

  • Fixed security issue #738: prototype pollution possible when applying patches CVE-2020-28477

    8.0.1

Release by release

  1. 9.0.6

    Security fix31 Aug 2021
    • security

      security: Follow up on CVE-2020-28477 where path: [["__proto__"], "x"] could still pollute the prototype

  2. 9.0.5

    5 Jul 20211 fix
    • fixed

      Release missing dist/ folder

  3. 9.0.4

    5 Jul 20213 fixes
    • fixed

      Return 'nothing' should produce undefined patch

    • fixed

      New undefined properties should end up in result object

    • fixed

      Better applyPatches type (#810) (09ac097), closes #809

  4. 9.0.3

    9 Jun 20211 new
    • new

      isPlainObject: Add quick comparison between input and Object to short-circuit taxing Function.toString invocations

  5. 9.0.2

    25 Apr 20211 fix
    • fixed

      Fix type inference for produce incorrectly inferring promise

  6. 9.0.1

    20 Mar 20211 fix
    • fixed

      immerable field being lost during patch value cloning

  7. 9.0.0

    Migration needed19 Mar 20211 new
    • breaking

      It is no longer allowed to return nothing from a recipe if the target state doesn't accept undefined.

    • breaking

      It is no longer allowed to return arbitrary things from a recipe. Recipes should either return nothing, or something that is assignable to the original state type. This will catch mistakes with accidental returns earlier.

    • new

      Improved typescript types (2c2f30e), closes #720

  8. 8.0.4

    19 Mar 20211 fix
    • fixed

      Make sure isPlainObject checks support objects send accross frames. Fixes #766 / #405