Skip to content

chore(deps): bump defu from 6.1.4 to 6.1.7#161

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/defu-6.1.6
Open

chore(deps): bump defu from 6.1.4 to 6.1.7#161
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/defu-6.1.6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 4, 2026

Bumps defu from 6.1.4 to 6.1.7.

Release notes

Sourced from defu's releases.

v6.1.7

compare changes

📦 Build

  • Correct the types export entry (#160)
  • Export Defu types (#157)

❤️ Contributors

v6.1.6

compare changes

📦 Build

v6.1.5

compare changes

🩹 Fixes

  • Prevent prototype pollution via __proto__ in defaults (#156)
  • Ignore inherited enumerable properties (11ba022)

✅ Tests

  • Add more tests for plain objects (b65f603)

❤️ Contributors

Changelog

Sourced from defu's changelog.

v6.1.7

compare changes

🩹 Fixes

  • defu.d.cts: Export Defu types (#157)

📦 Build

  • Correct the types export entry (#160)

❤️ Contributors

v6.1.6

compare changes

📦 Build

❤️ Contributors

v6.1.5

compare changes

🩹 Fixes

  • Prevent prototype pollution via __proto__ in defaults (#156)
  • Ignore inherited enumerable properties (11ba022)

🏡 Chore

✅ Tests

  • Add more tests for plain objects (b65f603)

🤖 CI

... (truncated)

Commits
  • 80c0146 chore(release): v6.1.7
  • 40d7ef4 fix(defu.d.cts): export Defu types (#157)
  • 3d3a7c8 build: correct the types export entry (#160)
  • 001c290 chore(release): v6.1.6
  • 407b516 build: fix mixed types
  • 23e59e6 chore(release): v6.1.5
  • 11ba022 fix: ignore inherited enumerable properties
  • 3942bfb fix: prevent prototype pollution via __proto__ in defaults (#156)
  • d3ef16d chore(deps): update actions/checkout action to v6 (#151)
  • 869a053 chore(deps): update actions/setup-node action to v6 (#149)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added automated Automated PR dependencies Dependency updates labels Apr 4, 2026
@dependabot dependabot Bot requested a review from abdout as a code owner April 4, 2026 23:40
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 4, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
hogwarts Ignored Ignored Preview Apr 29, 2026 5:00pm

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/defu-6.1.6 branch from 3d27db3 to 1cb462b Compare April 20, 2026 10:07
Bumps [defu](https://github.com/unjs/defu) from 6.1.4 to 6.1.7.
- [Release notes](https://github.com/unjs/defu/releases)
- [Changelog](https://github.com/unjs/defu/blob/main/CHANGELOG.md)
- [Commits](unjs/defu@v6.1.4...v6.1.7)

---
updated-dependencies:
- dependency-name: defu
  dependency-version: 6.1.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): Bump defu from 6.1.4 to 6.1.6 chore(deps): bump defu from 6.1.4 to 6.1.7 Apr 29, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/defu-6.1.6 branch from 1cb462b to fa747fa Compare April 29, 2026 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automated PR dependencies Dependency updates type: config

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants