build(deps): bump the npm_and_yarn group across 10 directories with 7 updates by dependabot[bot] · Pull Request #1 · Cdult/Diamonds

dependabot · 2026-05-26T22:54:57Z

Bumps the npm_and_yarn group with 1 update in the /remote directory: uuid.
Bumps the npm_and_yarn group with 3 updates in the / directory: @anthropic-ai/sdk, braces and qs.
Bumps the npm_and_yarn group with 1 update in the /extensions/microsoft-authentication directory: @nevware21/ts-utils.
Bumps the npm_and_yarn group with 1 update in the /extensions/media-preview directory: @nevware21/ts-utils.
Bumps the npm_and_yarn group with 1 update in the /extensions/markdown-language-features directory: @nevware21/ts-utils.
Bumps the npm_and_yarn group with 1 update in the /extensions/github-authentication directory: @nevware21/ts-utils.
Bumps the npm_and_yarn group with 1 update in the /extensions/copilot/test/simulation/fixtures/generate/issue-6163 directory: esbuild.
Bumps the npm_and_yarn group with 1 update in the /extensions/copilot directory: @anthropic-ai/sdk.
Bumps the npm_and_yarn group with 1 update in the /build/rspack directory: uuid.
Bumps the npm_and_yarn group with 1 update in the /build/npm/gyp directory: ip-address.

Updates uuid from 9.0.1 to 14.0.0

Release notes

Sourced from uuid's releases.

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

expect crypto to be global everywhere (requires node@20+) (#935)

drop node@18 support (#934)

Features

drop node@18 support (#934) (dc4ddb8)

Bug Fixes

expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)

Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

backport fix for GHSA-w5hq-g745-h8pq (9d27ddf)

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

make browser exports the default (#901)

Bug Fixes

make browser exports the default (#901) (bce9d72)

v12.0.1

12.0.1 (2026-04-29)

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.0 (2026-04-19)

Security

Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

crypto is now expected to be globally defined (requires node@20+) (#935)

drop node@18 support (#934)

upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

make browser exports the default (#901)

Bug Fixes

make browser exports the default (#901) (bce9d72)

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

update to typescript@5.2 (#887)

remove CommonJS support (#886)

drop node@16 support (#883)

Features

add node@24 to ci matrix (#879) (42b6178)

drop node@16 support (#883) (0f38cf1)

remove CommonJS support (#886) (ae786e2)

update to typescript@5.2 (#887) (c7ee405)

Bug Fixes

improve v4() performance (#894) (5fd974c)

restore node: prefix (#889) (e1f42a3)

11.1.0 (2025-02-19)

... (truncated)

Commits

7c1ea08 chore(main): release 14.0.0 (#926)
3d2c5b0 Merge commit from fork
f2c235f fix!: expect crypto to be global everywhere (requires node@20+) (#935)
529ef08 chore: upgrade TypeScript and fixup types (#927)
086fd79 chore: update dependencies (#933)
dc4ddb8 feat!: drop node@18 support (#934)
0f1f9c9 chore: switch to Biome for parsing and linting (#932)
e2879e6 chore: use maintained version of npm-run-all (#930)
ffa3138 fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)
0423d49 docs: remove obsolete v1 option notes (#915)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @anthropic-ai/sdk from 0.82.0 to 0.98.0

Release notes

Sourced from @anthropic-ai/sdk's releases.

sdk: v0.98.0

0.98.0 (2026-05-21)

Full Changelog: sdk-v0.97.1...sdk-v0.98.0

Features

api: Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (0528d47)

sdk: v0.97.1

0.97.1 (2026-05-19)

Full Changelog: sdk-v0.97.0...sdk-v0.97.1

Bug Fixes

runner: skip tool calls SessionToolRunner does not own (9987379)

sdk: v0.97.0

0.97.0 (2026-05-19)

Full Changelog: sdk-v0.96.0...sdk-v0.97.0

Features

client: Add support for self-hosted sandboxes in CMA with sandbox helpers (659a343)

Bug Fixes

typescript: upgrade tsc-multi so that it works with Node 26 (623f71c)

Chores

tests: remove redundant File import (cf821fc)

sdk: v0.96.0

0.96.0 (2026-05-13)

Full Changelog: sdk-v0.95.2...sdk-v0.96.0

Features

api: Add BetaManagedAgentsSearchResultBlock types (08f02f3)

api: Add support for cache diagnostics beta (eafbd6d)

Bug Fixes

... (truncated)

Changelog

Sourced from @anthropic-ai/sdk's changelog.

0.98.0 (2026-05-21)

Full Changelog: sdk-v0.97.1...sdk-v0.98.0

Features

api: Add support for thinking-token-count beta for estimated tokens in thinking block deltas when streaming (0528d47)

0.97.1 (2026-05-19)

Full Changelog: sdk-v0.97.0...sdk-v0.97.1

Bug Fixes

runner: skip tool calls SessionToolRunner does not own (9987379)

0.97.0 (2026-05-19)

Full Changelog: sdk-v0.96.0...sdk-v0.97.0

Features

client: Add support for self-hosted sandboxes in CMA with sandbox helpers (659a343)

Bug Fixes

typescript: upgrade tsc-multi so that it works with Node 26 (623f71c)

Chores

tests: remove redundant File import (cf821fc)

0.96.0 (2026-05-13)

Full Changelog: sdk-v0.95.2...sdk-v0.96.0

Features

api: Add BetaManagedAgentsSearchResultBlock types (08f02f3)

api: Add support for cache diagnostics beta (eafbd6d)

Bug Fixes

zod: ensure only zod/v4 types are used (#992) (9e08bcc)

Chores

... (truncated)

Commits

32ce8c0 chore: release main
1873a96 feat(api): Add support for thinking-token-count beta for estimated tokens in ...
ac9ece3 chore: release main
1987147 fix(runner): skip tool calls SessionToolRunner does not own
409ff0e chore: release main (#1052)
a53f60d chore: release main
d1b8d04 feat(api): Add support for cache diagnostics beta
8e43bf8 chore(api): spec updates
697e4d5 codegen metadata
cd5801c feat(api): Add BetaManagedAgentsSearchResultBlock types
Additional commits viewable in compare view

Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changelogs are for humans, not machines.

There should be an entry for every single version.

The same types of changes should be grouped.

Versions and sections should be linkable.

The latest version comes first.

The release date of each versions is displayed.

Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

Added for new features.

Changed for changes in existing functionality.

Deprecated for soon-to-be removed features.

Removed for now removed features.

Fixed for any bug fixes.

Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

The undocumented .makeRe method was removed

Require Node.js >= 8.3

Non-breaking changes

Caching was removed

Commits

See full diff in compare view

Updates qs from 6.15.1 to 6.15.2

Changelog

Sourced from qs's changelog.

6.15.2

[Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder

[Fix] stringify: use configured delimiter after charsetSentinel (#555)

[Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)

[Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)

[Fix] parse: handle nested bracket groups and add regression tests (#530)

[readme] fix grammar (#550)

[Dev Deps] update @ljharb/eslint-config

[Tests] add regression tests for keys containing percent-encoded bracket text

Commits

9aca407 v6.15.2
5e33d33 [Dev Deps] update @ljharb/eslint-config
21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
96755ab [readme] fix grammar
a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
See full diff in compare view

Updates @nevware21/ts-utils from 0.11.6 to 0.14.0

Release notes

Sourced from @nevware21/ts-utils's releases.

0.14.0

Changelog

Features

#525 feat(array): add new array helpers and array-like detection

New helpers: isArrayLike, arrUnique, arrCompact, arrFlatten, arrGroupBy, arrChunk and export previously missed isArrayLike

#527 feat(string): add strReplace and strReplaceAll helpers with refactored internal replacements

#528 feat(string): add strCapitalizeWords helper

#529 / #530 feat(string): add strTruncate, strCount, strAt, and strMatchAll helpers with shared literal regex helper

#533 feat(array): add arrFlatMap with ES5 polyfill support

#535 docs(types): add typing utilities for v0.14.0 and expand TSDoc examples

#536 feat: add isAsyncIterable and isIntegerInRange type/value inspection helpers

#543 feat(string): add strStartsWithAny, strEndsWithAny, strWrap, strUnwrap, and strNormalizeNewlines helpers

#564 feat(object): add new object utility helpers and harden defaults against prototype pollution

New helpers: objPick, objOmit, objPickBy, objOmitBy — property selection and omission with typed overloads

New helpers: objMapValues — create a new object with values transformed by a mapper function

New helpers: objMergeIf, objDefaults — conditional merge and shallow defaults (similar to Lodash _.defaults) hardened against prototype pollution

New helper: objDiff — shallow diff returning only changed/added keys from a modified object vs a base

New helpers: forEachOwnKey, forEachOwnKeySafe — iteration over both string and symbol keys (existing forEachOwnKeySafe was string-only)

New helper: objForEachKeySafe — safe string-key iteration that filters __proto__, constructor, prototype

Extended isUnsafeTarget coverage to TypedArrays, ArrayBuffer, DataView, WeakRef, FinalizationRegistry

Security Issue

CVE-2026-46681 Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

Also affected setValueByKey and setValueByIter

#565 feat: add prototype-pollution guards and array key helpers

Bug Fixes

#558 Fix ES2015 built-in type errors in consumers by adding lib reference directive to published declarations

Consumers using "lib": ["ES5", "DOM"] (or omitting lib) received Cannot find name 'Symbol' / Cannot find name 'Iterator' errors because the published .d.ts exposed ES2015 types without declaring the dependency

Added /// <reference lib="es2015" /> to the source entry points (index.ts, polyfills.ts) and a new post-processing script (lib/scripts/setTsReferences.js) that prepends the directive to the api-extractor bundled output (api-extractor strips these directives from its rollup)

Added "lib": ["ES2015", "DOM"] to all library and test tsconfig files for consistent compile-time validation

Net effect: consumers no longer need to add "ES2015" to their own tsconfig.json lib settings

#561 Bug: Falsy thisArg (0, '', false) overridden in arrForEach/iterForOf/objForEachKey

#566 Fix falsy thisArg (0, '', false) being overridden in arrForEach, iterForOf, objForEachKey

#562 Fix thisArg binding in polyArrFindIndex / polyArrFindLastIndex polyfills

Repository Improvements

#549 Drop Node.js 16 from CI matrix and add Node.js 24

#552 Upgrade Grunt devDependency to v1.6.2

#554 Add funding metadata to published package manifests

#556 Add release PR instructions to Copilot instructions

Full Changelog

0.13.0

... (truncated)

Changelog

Sourced from @nevware21/ts-utils's changelog.

v0.14.0 May 18th, 2026

Changelog

Features

#525 feat(array): add new array helpers and array-like detection

New helpers: isArrayLike, arrUnique, arrCompact, arrFlatten, arrGroupBy, arrChunk and export previously missed isArrayLike

#527 feat(string): add strReplace and strReplaceAll helpers with refactored internal replacements

#528 feat(string): add strCapitalizeWords helper

#529 / #530 feat(string): add strTruncate, strCount, strAt, and strMatchAll helpers with shared literal regex helper

#533 feat(array): add arrFlatMap with ES5 polyfill support

#535 docs(types): add typing utilities for v0.14.0 and expand TSDoc examples

#536 feat: add isAsyncIterable and isIntegerInRange type/value inspection helpers

#543 feat(string): add strStartsWithAny, strEndsWithAny, strWrap, strUnwrap, and strNormalizeNewlines helpers

#564 feat(object): add new object utility helpers and harden defaults against prototype pollution

New helpers: objPick, objOmit, objPickBy, objOmitBy — property selection and omission with typed overloads

New helpers: objMapValues — create a new object with values transformed by a mapper function

New helpers: objMergeIf, objDefaults — conditional merge and shallow defaults (similar to Lodash _.defaults) hardened against prototype pollution

New helper: objDiff — shallow diff returning only changed/added keys from a modified object vs a base

New helpers: forEachOwnKey, forEachOwnKeySafe — iteration over both string and symbol keys (existing forEachOwnKeySafe was string-only)

New helper: objForEachKeySafe — safe string-key iteration that filters __proto__, constructor, prototype

Extended isUnsafeTarget coverage to TypedArrays, ArrayBuffer, DataView, WeakRef, FinalizationRegistry

Security Issue

CVE-2026-46681 Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

Also affected setValueByKey and setValueByIter

#565 feat: add prototype-pollution guards and array key helpers

Bug Fixes

#558 Fix ES2015 built-in type errors in consumers by adding lib reference directive to published declarations

Consumers using "lib": ["ES5", "DOM"] (or omitting lib) received Cannot find name 'Symbol' / Cannot find name 'Iterator' errors because the published .d.ts exposed ES2015 types without declaring the dependency

Added /// <reference lib="es2015" /> to the source entry points (index.ts, polyfills.ts) and a new post-processing script (lib/scripts/setTsReferences.js) that prepends the directive to the api-extractor bundled output (api-extractor strips these directives from its rollup)

Added "lib": ["ES2015", "DOM"] to all library and test tsconfig files for consistent compile-time validation

Net effect: consumers no longer need to add "ES2015" to their own tsconfig.json lib settings

#561 Bug: Falsy thisArg (0, '', false) overridden in arrForEach/iterForOf/objForEachKey

#566 Fix falsy thisArg (0, '', false) being overridden in arrForEach, iterForOf, objForEachKey

#562 Fix thisArg binding in polyArrFindIndex / polyArrFindLastIndex polyfills

Repository Improvements

#549 Drop Node.js 16 from CI matrix and add Node.js 24

#552 Upgrade Grunt devDependency to v1.6.2

#554 Add funding metadata to published package manifests

#556 Add release PR instructions to Copilot instructions

Dependency Updates

... (truncated)

Commits

45cb369 [Release] Increase version to 0.14.0 (#567)
5e887f4 Add new object utility helpers and harden defaults against prototype pollutio...
0a486d3 Bug: Falsy thisArg (0, '', false) overridden in arrForEach/iterForOf/objForEa...
9362b6e Bump puppeteer from 24.43.1 to 25.0.2 (#559)
d65f853 Fix thisArg binding in polyArrFindIndex / polyArrFindLastIndex polyfill...
26b4766 Add prototype-pollution guards and array key helpers (#565)
4d28559 Fix ES2015 built-in type errors in consumers by adding lib reference directiv...
da838a4 docs: add release PR instructions to copilot instructions (#556)
97d40a2 Add funding metadata to published package manifests (#554)
287f7c9 Upgrade Grunt devDependency to v1.6.2 (#552)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nevware21bot, a new releaser for @nevware21/ts-utils since your current version.

Updates @nevware21/ts-utils from 0.11.6 to 0.14.0

Release notes

Sourced from @nevware21/ts-utils's releases.

0.14.0

Changelog

Features

#525 feat(array): add new array helpers and array-like detection

New helpers: isArrayLike, arrUnique, arrCompact, arrFlatten, arrGroupBy, arrChunk and export previously missed isArrayLike

#527 feat(string): add strReplace and strReplaceAll helpers with refactored internal replacements

#528 feat(string): add strCapitalizeWords helper

#529 / #530 feat(string): add strTruncate, strCount, strAt, and strMatchAll helpers with shared literal regex helper

#533 feat(array): add arrFlatMap with ES5 polyfill support

#535 docs(types): add typing utilities for v0.14.0 and expand TSDoc examples

#536 feat: add isAsyncIterable and isIntegerInRange type/value inspection helpers

#543 feat(string): add strStartsWithAny, strEndsWithAny, strWrap, strUnwrap, and strNormalizeNewlines helpers

#564 feat(object): add new object utility helpers and harden defaults against prototype pollution

New helpers: objPick, objOmit, objPickBy, objOmitBy — property selection and omission with typed overloads

New helpers: objMapValues — create a new object with values transformed by a mapper function

New helpers: objMergeIf, objDefaults — conditional merge and shallow defaults (similar to Lodash _.defaults) hardened against prototype pollution

New helper: objDiff — shallow diff returning only changed/added keys from a modified object vs a base

New helpers: forEachOwnKey, forEachOwnKeySafe — iteration over both string and symbol keys (existing forEachOwnKeySafe was string-only)

New helper: objForEachKeySafe — safe string-key iteration that filters __proto__, constructor, prototype

Extended isUnsafeTarget coverage to TypedArrays, ArrayBuffer, DataView, WeakRef, FinalizationRegistry

Security Issue

CVE-2026-46681 Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

Also affected setValueByKey and setValueByIter

#565 feat: add prototype-pollution guards and array key helpers

Bug Fixes

#558 Fix ES2015 built-in type errors in consumers by adding lib reference directive to published declarations

Consumers using "lib": ["ES5", "DOM"] (or omitting lib) received Cannot find name 'Symbol' / Cannot find name 'Iterator' errors because the published .d.ts exposed ES2015 types without declaring the dependency

Added /// <reference lib="es2015" /> to the source entry points (index.ts, polyfills.ts) and a new post-processing script (lib/scripts/setTsReferences.js) that prepends the directive to the api-extractor bundled output (api-extractor strips these directives from its rollup)

Added "lib": ["ES2015", "DOM"] to all library and test tsconfig files for consistent compile-time validation

Net effect: consumers no longer need to add "ES2015" to their own tsconfig.json lib settings

#561 Bug: Falsy thisArg (0, '', false) overridden in arrForEach/iterForOf/objForEachKey

#566 Fix falsy thisArg (0, '', false) being overridden in arrForEach, iterForOf, objForEachKey

#562 Fix thisArg binding in polyArrFindIndex / polyArrFindLastIndex polyfills

Repository Improvements

#549 Drop Node.js 16 from CI matrix and add Node.js 24

#552 Upgrade Grunt devDependency to v1.6.2

#554 Add funding metadata to published package manifests

#556 Add release PR instructions to Copilot instructions

Full Changelog

0.13.0

... (truncated)

Changelog

Sourced from @nevware21/ts-utils's changelog.

v0.14.0 May 18th, 2026

Changelog

Features

#525 feat(array): add new array helpers and array-like detection

New helpers: isArrayLike, arrUnique, arrCompact, arrFlatten, arrGroupBy, arrChunk and export previously missed isArrayLike

#527 feat(string): add strReplace and strReplaceAll helpers with refactored internal replacements

#528 feat(string): add strCapitalizeWords helper

#529 / #530 feat(string): add strTruncate, strCount, strAt, and strMatchAll helpers with shared literal regex helper

#533 feat(array): add arrFlatMap with ES5 polyfill support

#535 docs(types): add typing utilities for v0.14.0 and expand TSDoc examples

#536 feat: add isAsyncIterable and isIntegerInRange type/value inspection helpers

#543 feat(string): add strStartsWithAny, strEndsWithAny, strWrap, strUnwrap, and strNormalizeNewlines helpers

#564 feat(object): add new object utility helpers and harden defaults against prototype pollution

New helpers: objPick, objOmit, objPickBy, objOmitBy — property selection and omission with typed overloads

New helpers: objMapValues — create a new object with values transformed by a mapper function

New helpers: objMergeIf, objDefaults — conditional merge and shallow defaults (similar to Lodash _.defaults) hardened against prototype pollution

New helper: objDiff — shallow diff returning only changed/added keys from a modified object vs a base

New helpers: forEachOwnKey, forEachOwnKeySafe — iteration over both string and symbol keys (existing forEachOwnKeySafe was string-only)

New helper: objForEachKeySafe — safe string-key iteration that filters __proto__, constructor, prototype

Extended isUnsafeTarget coverage to TypedArrays, ArrayBuffer, DataView, WeakRef, FinalizationRegistry

Security Issue

CVE-2026-46681 Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

Also affected setValueByKey and setValueByIter

#565 feat: add prototype-pollution guards and array key helpers

Bug Fixes

#558 Fix ES2015 built-in type errors in consumers by adding lib reference directive to published declarations

Consumers using "lib": ["ES5", "DOM"] (or omitting lib) received Cannot find name 'Symbol' / Cannot find name 'Iterator' errors because the published .d.ts exposed ES2015 types without declaring the dependency

Added /// <reference lib="es2015" /> to the source entry points (index.ts, polyfills.ts) and a new post-processing script (lib/scripts/setTsReferences.js) that prepends the directive to the api-extractor bundled output (api-extractor strips these directives from its rollup)

Added "lib": ["ES2015", "DOM"] to all library and test tsconfig files for consistent compile-time validation

Net effect: consumers no longer need to add "ES2015" to their own tsconfig.json lib settings

#561 Bug: Falsy thisArg (0, '', false) overridden in arrForEach/iterForOf/objForEachKey

#566 Fix falsy thisArg (0, '', false) being overridden in arrForEach, iterForOf, objForEachKey

#562 Fix thisArg binding in polyArrFindIndex / polyArrFindLastIndex polyfills

Repository Improvements

#549 Drop Node.js 16 from CI matrix and add Node.js 24

#552 Upgrade Grunt devDependency to v1.6.2

#554 Add funding metadata to published package manifests

#556 Add release PR instructions to Copilot instructions

Dependency Updates

... (truncated)

Commits

45cb369 [Release] Increase version to 0.14.0 (#567)
5e887f4 Add new object utility helpers and harden defaults against prototype pollutio...
0a486d3 Bug: Falsy thisArg (0, '', false) overridden in arrForEach/iterForOf/objForEa...
9362b6e Bump puppeteer from 24.43.1 to 25.0.2 (#559)
d65f853 Fix thisArg binding in polyArrFindIndex / polyArrFindLastIndex polyfill...
26b4766 Add prototype-pollution guards and array key helpers (#565)
4d28559 Fix ES2015 built-in type errors in consumers by adding lib reference directiv...
da838a4 docs: add release PR instructions to copilot instructions (#556)
97d40a2 Add funding metadata to published package manifests (#554)
287f7c9 Upgrade Grunt devDependency to v1.6.2 (#552)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nevware21bot, a new releaser for @nevware21/ts-utils since your current version.

Updates @nevware21/ts-utils from 0.11.6 to 0.14.0

Release notes

Sourced from @nevware21/ts-utils's releases.

0.14.0

Changelog

Features

#525 feat(array): add new array helpers and array-like detection

New helpers: isArrayLike, arrUnique, arrCompact, arrFlatten, arrGroupBy, arrChunk and export previously missed isArrayLike

#527 feat(string): add strReplace and strReplaceAll helpers with refactored internal replacements

#528 feat(string): add strCapitalizeWords helper

#529 / #530 feat(string): add strTruncate, strCount, strAt, and strMatchAll helpers with shared literal regex helper

#533 feat(array): add arrFlatMap with ES5 polyfill support

#535 docs(types): add typing utilities for v0.14.0 and expand TSDoc examples

#536 feat: add isAsyncIterable and isIntegerInRange type/value inspection helpers

#543 feat(string): add strStartsWithAny, strEndsWithAny, strWrap, strUnwrap, and strNormalizeNewlines helpers

#564 feat(object): add new object utility helpers and harden defaults against prototype pollution

New helpers: objPick, objOmit, objPickBy, objOmitBy — property selection and omission with typed overloads

New helpers: objMapValues — create a new object with values transformed by a mapper function

New helpers: objMergeIf, objDefaults — conditional merge and shallow defaults (similar to Lodash _.defaults) hardened against prototype pollution

New helper: objDiff — shallow diff returning only changed/added keys from a modified object vs a base

New helpers: forEachOwnKey, forEachOwnKeySafe — iteration over both string and symbol keys (existing forEachOwnKeySafe was string-only)

New helper: objForEachKeySafe — safe string-key iteration that filters __proto__, constructor, prototype

Extended isUnsafeTarget coverage to TypedArrays, ArrayBuffer, DataView, WeakRef, FinalizationRegistry

Security Issue

CVE-2026-46681 Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

Also affected setValueByKey and setValueByIter

#565 feat: add prototype-pollution guards and array key helpers

Bug Fixes

#558 Fix ES2015 built-in type errors in consumers by adding lib reference directive to published declarations

Consumers using "lib": ["ES5", "DOM"] (or omitting lib) received Cannot find name 'Symbol' / Cannot find name 'Iterator' errors because the published .d.ts exposed ES2015 types without declaring the dependency

Added /// <reference lib="es2015" /> to the source entry points (index.ts, polyfills.ts) and a new post-processing script (lib/scripts/setTsReferences.js) that prepends the directive to the api-extractor bundled output (api-extractor strips these directives from its rollup)

Added "lib": ["ES2015", "DOM"] to all library and test tsconfig files for consistent compile-time validation

Net effect: consumers no longer need to add "ES2015" to their own tsconfig.json lib settings

#561 Bug: Falsy thisArg (0, '', false) overridden in arrForEach/iterForOf/objForEachKey

#566 Fix falsy thisArg (0, '', false) being overridden in arrForEach, iterForOf, objForEachKey

#562 Fix thisArg binding in polyArrFindIndex / polyArrFindLastIndex polyfills

Repository Improvements

#549 Drop Node.js 16 from CI matrix and add Node.js 24

#552 Upgrade Grunt devDependency to v1.6.2

#554 Add funding metadata to published package manifests

#556 Add release PR instructions to Copilot instructions

Full Changelog

0.13.0

... (truncated)

Changelog

Sourced from @nevware21/ts-utils's changelog.

v0.14.0 May 18th, 2026

Changelog

Features

#525 feat(array): add new array helpers and array-like detection

New helpers: isArrayLike, arrUnique, arrCompact, arrFlatten, arrGroupBy, arrChunk and export previously missed isArrayLike

#527 feat(string): add strReplace and strReplaceAll helpers with refactored internal replacements

#528 feat(string): add strCapitalizeWords helper

#529 / #530 feat(string): add strTruncate, strCount, strAt, and strMatchAll helpers with shared literal regex helper

#533 feat(array): add arrFlatMap with ES5 polyfill support

#535 docs(types): add typing utilities for v0.14.0 and expand TSDoc examples

#536 feat: add isAsyncIterable and isIntegerInRange type/value inspection helpers

#543 feat(string): add strStartsWithAny, strEndsWithAny, strWrap, strUnwrap, and strNormalizeNewlines helpers

#564 feat(object): add new object utility helpers and harden defaults against prototype pollution

New helpers: objPick, objOmit, objPickBy, objOmitBy — property selection and omission with typed overloads

New helpers: objMapValues — create a new object with values transformed by a mapper function

New helpers: objMergeIf, objDefaults — conditional merge and shallow defaults (similar to Lodash _.defaults) hardened against prototype pollution

New helper: objDiff — shallow diff returning only changed/added keys from a modified object vs a base

New helpers: forEachOwnKey, forEachOwnKeySafe — iteration over both string and symbol keys (existing forEachOwnKeySafe was string-only)

New helper: objForEachKeySafe — safe string-key iteration that filters __proto__, constructor, prototype

Extended isUnsafeTarget coverage to TypedArrays, ArrayBuffer, DataView, WeakRef, FinalizationRegistry

Security Issue

CVE-2026-46681 Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty

Also affected setValueByKeyDescription has been truncated

… updates Bumps the npm_and_yarn group with 1 update in the /remote directory: [uuid](https://github.com/uuidjs/uuid). Bumps the npm_and_yarn group with 3 updates in the / directory: [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript), [braces](https://github.com/micromatch/braces) and [qs](https://github.com/ljharb/qs). Bumps the npm_and_yarn group with 1 update in the /extensions/microsoft-authentication directory: [@nevware21/ts-utils](https://github.com/nevware21/ts-utils). Bumps the npm_and_yarn group with 1 update in the /extensions/media-preview directory: [@nevware21/ts-utils](https://github.com/nevware21/ts-utils). Bumps the npm_and_yarn group with 1 update in the /extensions/markdown-language-features directory: [@nevware21/ts-utils](https://github.com/nevware21/ts-utils). Bumps the npm_and_yarn group with 1 update in the /extensions/github-authentication directory: [@nevware21/ts-utils](https://github.com/nevware21/ts-utils). Bumps the npm_and_yarn group with 1 update in the /extensions/copilot/test/simulation/fixtures/generate/issue-6163 directory: [esbuild](https://github.com/evanw/esbuild). Bumps the npm_and_yarn group with 1 update in the /extensions/copilot directory: [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript). Bumps the npm_and_yarn group with 1 update in the /build/rspack directory: [uuid](https://github.com/uuidjs/uuid). Bumps the npm_and_yarn group with 1 update in the /build/npm/gyp directory: [ip-address](https://github.com/beaugunderson/ip-address). Updates `uuid` from 9.0.1 to 14.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v9.0.1...v14.0.0) Updates `@anthropic-ai/sdk` from 0.82.0 to 0.98.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.98.0) Updates `braces` from 2.3.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.3) Updates `qs` from 6.15.1 to 6.15.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.1...v6.15.2) Updates `@nevware21/ts-utils` from 0.11.6 to 0.14.0 - [Release notes](https://github.com/nevware21/ts-utils/releases) - [Changelog](https://github.com/nevware21/ts-utils/blob/main/CHANGELOG.md) - [Commits](nevware21/ts-utils@0.11.6...0.14.0) Updates `@nevware21/ts-utils` from 0.11.6 to 0.14.0 - [Release notes](https://github.com/nevware21/ts-utils/releases) - [Changelog](https://github.com/nevware21/ts-utils/blob/main/CHANGELOG.md) - [Commits](nevware21/ts-utils@0.11.6...0.14.0) Updates `@nevware21/ts-utils` from 0.11.6 to 0.14.0 - [Release notes](https://github.com/nevware21/ts-utils/releases) - [Changelog](https://github.com/nevware21/ts-utils/blob/main/CHANGELOG.md) - [Commits](nevware21/ts-utils@0.11.6...0.14.0) Updates `@nevware21/ts-utils` from 0.11.6 to 0.14.0 - [Release notes](https://github.com/nevware21/ts-utils/releases) - [Changelog](https://github.com/nevware21/ts-utils/blob/main/CHANGELOG.md) - [Commits](nevware21/ts-utils@0.11.6...0.14.0) Updates `esbuild` from 0.21.5 to 0.28.0 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md) - [Commits](evanw/esbuild@v0.21.5...v0.28.0) Updates `@anthropic-ai/sdk` from 0.82.0 to 0.98.0 - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.82.0...sdk-v0.98.0) Removes `uuid` Updates `ip-address` from 9.0.5 to 10.2.0 - [Commits](beaugunderson/ip-address@v9.0.5...v10.2.0) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.98.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@nevware21/ts-utils" dependency-version: 0.14.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@nevware21/ts-utils" dependency-version: 0.14.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@nevware21/ts-utils" dependency-version: 0.14.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@nevware21/ts-utils" dependency-version: 0.14.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.28.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.98.0 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: uuid dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-28T03:38:03Z

Superseded by #3.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 26, 2026

dependabot Bot closed this May 28, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/remote/npm_and_yarn-65d9bf1bd1 branch May 28, 2026 03:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm_and_yarn group across 10 directories with 7 updates#1

build(deps): bump the npm_and_yarn group across 10 directories with 7 updates#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/remote/npm_and_yarn-65d9bf1bd1

dependabot Bot commented on behalf of github May 26, 2026

Uh oh!

dependabot Bot commented on behalf of github May 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 26, 2026

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

Features

Bug Fixes

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

Bug Fixes

v12.0.1

12.0.1 (2026-04-29)

14.0.0 (2026-04-19)

Security

⚠ BREAKING CHANGES

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

Features

Bug Fixes

11.1.0 (2025-02-19)

sdk: v0.98.0

0.98.0 (2026-05-21)

Features

sdk: v0.97.1

0.97.1 (2026-05-19)

Bug Fixes

sdk: v0.97.0

0.97.0 (2026-05-19)

Features

Bug Fixes

Chores

sdk: v0.96.0

0.96.0 (2026-05-13)

Features

Bug Fixes

0.98.0 (2026-05-21)

Features

0.97.1 (2026-05-19)

Bug Fixes

0.97.0 (2026-05-19)

Features

Bug Fixes

Chores

0.96.0 (2026-05-13)

Features

Bug Fixes

Chores

Release history

[3.0.0] - 2018-04-08

6.15.2

0.14.0

Changelog

Features

Security Issue

Bug Fixes

Repository Improvements

0.13.0

v0.14.0 May 18th, 2026

Changelog

Features

Security Issue

Bug Fixes

Repository Improvements

Dependency Updates

0.14.0

Changelog

Features

Security Issue

Bug Fixes

Repository Improvements