immerjs / immer

46%

LAST BUILD ON BRANCH main

branch: main

CHANGE BRANCH

x

Reset

Sync Branches

• main
• add-deno-install
• agent/add-zh-cn-array-methods-docs
• defer-type-inference
• dependabot/npm_and_yarn/babel/core-7.29.6
• dependabot/npm_and_yarn/handlebars-4.7.9
• dependabot/npm_and_yarn/immutable-3.8.3
• dependabot/npm_and_yarn/immutable-4.3.8
• dependabot/npm_and_yarn/immutable-4.3.9
• dependabot/npm_and_yarn/ip-address-10.4.0
• dependabot/npm_and_yarn/lodash-4.18.1
• dependabot/npm_and_yarn/picomatch-2.3.2
• dependabot/npm_and_yarn/shell-quote-1.10.0
• dependabot/npm_and_yarn/shell-quote-1.8.4
• dependabot/npm_and_yarn/sigstore-4.1.1
• dependabot/npm_and_yarn/sigstore/core-3.2.1
• dependabot/npm_and_yarn/sigstore/verify-3.1.1
• dependabot/npm_and_yarn/tar-7.5.16
• dependabot/npm_and_yarn/tar-7.5.22
• dependabot/npm_and_yarn/vite-6.4.2
• dependabot/npm_and_yarn/vite-6.4.3
• dependabot/npm_and_yarn/vitest-3.2.6
• dependabot/npm_and_yarn/website/babel/plugin-transform-modules-systemjs-7.29.4
• dependabot/npm_and_yarn/website/brace-expansion-1.1.14
• dependabot/npm_and_yarn/website/brace-expansion-1.1.18
• dependabot/npm_and_yarn/website/fast-uri-3.1.2
• dependabot/npm_and_yarn/website/fast-uri-3.1.4
• dependabot/npm_and_yarn/website/fast-uri-3.1.5
• dependabot/npm_and_yarn/website/follow-redirects-1.16.0
• dependabot/npm_and_yarn/website/http-proxy-middleware-2.0.10
• dependabot/npm_and_yarn/website/joi-17.13.4
• dependabot/npm_and_yarn/website/lodash-4.18.1
• dependabot/npm_and_yarn/website/nanoid-3.3.18
• dependabot/npm_and_yarn/website/node-forge-1.4.0
• dependabot/npm_and_yarn/website/picomatch-2.3.2
• dependabot/npm_and_yarn/website/postcss-8.5.13
• dependabot/npm_and_yarn/website/postcss-8.5.25
• dependabot/npm_and_yarn/website/shell-quote-1.8.4
• dependabot/npm_and_yarn/website/svgo-2.8.2
• dependabot/npm_and_yarn/website/svgo-2.8.3
• dependabot/npm_and_yarn/website/websocket-driver-0.7.5
• dependabot/npm_and_yarn/website/yaml-1.10.3
• docs/custom-produce-function
• feature/harden-publishing-2026-05
• fix-prototype-vulnerability
• fix/858-reassign-to-same-non-primitive
• fix/896-typings-current-draft
• fix/apply-patches-null-path-traversal
• fix/array-methods-assigned-index-key
• fix/array-methods-noop-structural-sharing
• fix/array-reorder-base-mutation
• fix/docs-useimmer-todo-done-1011
• fix/prototype-undefined-not-stored-as-own-prop
• fix/rfc6902-patch-path-docs
• fix/ts2403-global-iterator-decl
• patch-1
• prototype-inspection-tests
• refs/pull/1239/merge
• refs/pull/1279/merge
• refs/pull/1281/merge
• revert-prototype-fix

Build # 32230152197

Build Type

push

github

Committed by web-flow

Commit Message

chore(test): pin draft prototype-inspection behavior restored by #1271 (#1272)

Drafts must stay safe for ecosystem introspection idioms: lodash's
isPrototype (used by isEmpty/isEqual/isPlainObject) reads
value.constructor.prototype, and fast-deep-equal compares constructor
identity. The guard reverted in #1271 broke these (#1265, #1266, #1268)
while its tests still passed, because try/catch made a crash and a
successful block indistinguishable.

These tests assert observable behavior directly, so they fail on
11.1.9-11.1.11 (verified: constructor.prototype throws, constructor
identity and 'in' checks break, writes to own keys named prototype are
dropped) and pass on main. setPrototypeOf remains forbidden; the
applyPatches-layer pollution guards in patch.js are untouched.

Coverage Stats

674 of 724 branches covered (93.09%)

Branch coverage included in aggregate %.

1745 of 4518 relevant lines covered (38.62%)

1877.14 hits per line