Skip to content

Bump deepmerge-ts from 7.1.5 to 8.0.0 - #3485

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/deepmerge-ts-8.0.0
Open

Bump deepmerge-ts from 7.1.5 to 8.0.0#3485
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/deepmerge-ts-8.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps deepmerge-ts from 7.1.5 to 8.0.0.

Changelog

Sourced from deepmerge-ts's changelog.

8.0.0 (2026-08-16)

Bug Fixes

  • stop deepmergeInto from leak-mutating nested input containers (2cd7824)

Code Refactoring

  • rename mergeInfo system and align shorthand, add JSDoc examples (590ed9b)

Features

  • add circular reference support, maxDepth option, and hierarchy tracking (#707) (3984927)
  • add deepmergeFastUnsafe and deepmergeIntoFastUnsafe entrypoints (#708) (df9b11c)
  • support deep map value merging (ac4bf7a), closes #705

Performance Improvements

  • add a dedicated fast path for merging 2 records (4dbcea7)
  • avoid array reallocation when no undefined values exist (99f2241), closes #696
  • optimize array and set merging (8d435f9), closes #698
  • optimize map merging and remove dead code (14e1604), closes #702
  • optimize record key and type detection (fa85462), closes #694
  • reduce benchmark sample count so the bench fits in 512MB heap (66635e3)
  • reduce type-level work and shortcut same-type merges (473a971)
  • speed up the mergeUnknowns hot path (95b2964), closes #699

BREAKING CHANGES

  • deepmergeInto no longer leak-mutates input containers. Code that depended on inputs being merged into the target through alias must now pass copies explicitly. The documented 'update the target' behavior is preserved on the target itself.
    • DeepMergeMetaMetaData has been renamed to DeepMergeMergeInfo. Imports must be updated.
  • The MetaDataUpdater callback's metaMeta parameter is now mergeInfo. Implementations must update the parameter name accordingly.
  • The MM generic shorthand has been renamed to MI (e.g. in MetaDataUpdater<M, MI>).
  • The DeepMergeIntoFunctionUtils type has been renamed to DeepMergeIntoUtils.
  • Updates the internal calculation logic for mergeMaps and mergeMapsInto. Colliding keys will now be merged.

7.1.6 (2026-08-11)

... (truncated)

Commits
  • 188dba4 chore(release): 8.0.0 [skip ci]
  • 57e4403 Merge pull request #712 from RebeccaStevens/dev
  • f7ebf92 test: cover semantics, containers, and types across all variants
  • af8e57e chore: update the type benchmark baseline
  • 66635e3 perf: reduce benchmark sample count so the bench fits in 512MB heap
  • 1589755 test: complete benchmark coverage for deepmerge-ts variants
  • 2cd7824 fix!: stop deepmergeInto from leak-mutating nested input containers
  • 1aae238 refactor: re-export DeepMergeMetaMetaData as a deprecated alias for DeepMerge...
  • 590ed9b refactor!: rename mergeInfo system and align shorthand, add JSDoc examples
  • 3258db3 refactor: reorder fast variant overloads and meta-updater helpers, fix IDE to...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for deepmerge-ts since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [deepmerge-ts](https://github.com/RebeccaStevens/deepmerge-ts) from 7.1.5 to 8.0.0.
- [Changelog](https://github.com/RebeccaStevens/deepmerge-ts/blob/main/CHANGELOG.md)
- [Commits](RebeccaStevens/deepmerge-ts@v7.1.5...v8.0.0)

---
updated-dependencies:
- dependency-name: deepmerge-ts
  dependency-version: 8.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 17, 2026
@vercel

vercel Bot commented Aug 17, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
shepherd-docs Ready Ready Preview Aug 17, 2026 2:15pm
shepherd-landing Ready Ready Preview Aug 17, 2026 2:15pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants