Bumps [immer](https://github.com/immerjs/immer) from 11.1.9 to 11.1.15. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/immerjs/immer/releases">immer's releases</a>.</em></p> <blockquote> <h2>v11.1.15</h2> <h2><a href="https://github.com/immerjs/immer/compare/v11.1.14...v11.1.15">11.1.15</a> (2026-07-16)</h2> <h3>Bug Fixes</h3> <ul> <li>correct curried produceWithPatches return type (<a href="https://redirect.github.com/immerjs/immer/issues/1249">#1249</a>) (<a href="https://github.com/immerjs/immer/commit/a3be9df762c1dbe9959a011ddbab0ce838cbc468">a3be9df</a>), closes <a href="https://redirect.github.com/immerjs/immer/issues/1045">#1045</a></li> </ul> <h2>v11.1.14</h2> <h2><a href="https://github.com/immerjs/immer/compare/v11.1.13...v11.1.14">11.1.14</a> (2026-07-16)</h2> <h3>Bug Fixes</h3> <ul> <li>throw proper immer error when applyPatches path traverses null (<a href="https://redirect.github.com/immerjs/immer/issues/1251">#1251</a>) (<a href="https://github.com/immerjs/immer/commit/e38ad71f256844bf2dc28c1120c33c930c881bb6">e38ad71</a>)</li> </ul> <h2>v11.1.13</h2> <h2><a href="https://github.com/immerjs/immer/compare/v11.1.12...v11.1.13">11.1.13</a> (2026-07-16)</h2> <h3>Bug Fixes</h3> <ul> <li>draft relocated base refs after reverse/sort in array-methods plugin (<a href="https://redirect.github.com/immerjs/immer/issues/1255">#1255</a>) (<a href="https://github.com/immerjs/immer/commit/a73672ab76b5d9fd94f278a23c6c1931a03147e5">a73672a</a>)</li> </ul> <h2>v11.1.12</h2> <h2><a href="https://github.com/immerjs/immer/compare/v11.1.11...v11.1.12">11.1.12</a> (2026-07-16)</h2> <h3>Bug Fixes</h3> <ul> <li>Revert "prevent prototype pollution via constructor.prototype access (CVE-2026-XXXX) (<a href="https://redirect.github.com/immerjs/immer/issues/1259">#1259</a>)" (<a href="https://redirect.github.com/immerjs/immer/issues/1271">#1271</a>) (<a href="https://github.com/immerjs/immer/commit/4d3d6ff88caa85734a802a91cdb3dbe004d88b17">4d3d6ff</a>), closes <a href="https://redirect.github.com/immerjs/immer/issues/1266">#1266</a> <a href="https://redirect.github.com/immerjs/immer/issues/1268">#1268</a> <a href="https://redirect.github.com/immerjs/immer/issues/1265">#1265</a></li> </ul> <h2>v11.1.11</h2> <h2><a href="https://github.com/immerjs/immer/compare/v11.1.10...v11.1.11">11.1.11</a> (2026-07-03)</h2> <h3>Bug Fixes</h3> <ul> <li>improve DraftMap.{entries,values}() compatibility<a href="https://redirect.github.com/immerjs/immer/issues/1228">#1228</a> (<a href="https://redirect.github.com/immerjs/immer/issues/1228">#1228</a>) (<a href="https://github.com/immerjs/immer/commit/858d0365aa292a1f2028ccac3dfa8fccfbfa75c4">858d036</a>)</li> </ul> <h2>v11.1.10</h2> <h2><a href="https://github.com/immerjs/immer/compare/v11.1.9...v11.1.10">11.1.10</a> (2026-07-03)</h2> <h3>Bug Fixes</h3> <ul> <li>undefined assigned to a prototype-inherited key gets dropped (<a href="https://redirect.github.com/immerjs/immer/issues/1262">#1262</a>) (<a href="https://github.com/immerjs/immer/commit/16e225b5a316d9ef6695e9aee45eab6e7bf4258a">16e225b</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/immerjs/immer/commit/a3be9df762c1dbe9959a011ddbab0ce838cbc468"><code>a3be9df</code></a> fix: correct curried produceWithPatches return type (<a href="https://redirect.github.com/immerjs/immer/issues/1249">#1249</a>)</li> <li><a href="https://github.com/immerjs/immer/commit/7cab3c27d52972273a29b62f22c519493a45e0f4"><code>7cab3c2</code></a> ci: harden GitHub Actions workflows (SHA-pin, permissions, persist-credential...</li> <li><a href="https://github.com/immerjs/immer/commit/e38ad71f256844bf2dc28c1120c33c930c881bb6"><code>e38ad71</code></a> fix: throw proper immer error when applyPatches path traverses null (<a href="https://redirect.github.com/immerjs/immer/issues/1251">#1251</a>)</li> <li><a href="https://github.com/immerjs/immer/commit/8bc4b2d49a3a01eeb8f19f200bac183e9a7deaa6"><code>8bc4b2d</code></a> docs: add Zenith and DOMD to Built with Immer (<a href="https://redirect.github.com/immerjs/immer/issues/1245">#1245</a>)</li> <li><a href="https://github.com/immerjs/immer/commit/a73672ab76b5d9fd94f278a23c6c1931a03147e5"><code>a73672a</code></a> fix: draft relocated base refs after reverse/sort in array-methods plugin (<a href="https://redirect.github.com/immerjs/immer/issues/1">#1</a>...</li> <li><a href="https://github.com/immerjs/immer/commit/cfec5e51660aabd5f9026d3de1a0793630ef20c0"><code>cfec5e5</code></a> chore(deps-dev): bump <code>@babel/core</code> from 7.21.4 to 7.29.6 (<a href="https://redirect.github.com/immerjs/immer/issues/1254">#1254</a>)</li> <li><a href="https://github.com/immerjs/immer/commit/e4f59233cade84de49b6aca67379c0a1cfdc991e"><code>e4f5923</code></a> chore(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /website (<a href="https://redirect.github.com/immerjs/immer/issues/1270">#1270</a>)</li> <li><a href="https://github.com/immerjs/immer/commit/4d3d6ff88caa85734a802a91cdb3dbe004d88b17"><code>4d3d6ff</code></a> fix: Revert "prevent prototype pollution via constructor.prototype access (CV...</li> <li><a href="https://github.com/immerjs/immer/commit/60ca295e1185db80322ef55ec3fb8475cbc960c7"><code>60ca295</code></a> chore(deps): bump <code>@sigstore/core</code> from 3.2.0 to 3.2.1 (<a href="https://redirect.github.com/immerjs/immer/issues/1258">#1258</a>)</li> <li><a href="https://github.com/immerjs/immer/commit/858d0365aa292a1f2028ccac3dfa8fccfbfa75c4"><code>858d036</code></a> fix: improve DraftMap.{entries,values}() compatibility#1228 (<a href="https://redirect.github.com/immerjs/immer/issues/1228">#1228</a>)</li> <li>Additional commits viewable in <a href="https://github.com/immerjs/immer/compare/v11.1.9...v11.1.15">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=immer&package-manager=npm_and_yarn&previous-version=11.1.9&new-version=11.1.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>