sequelize-typescript - npm Package Compare versions

Comparing version 2.1.5 to 2.1.6

CHANGELOG.md

@@ -0,1 +1,10 @@
+
+
+## [2.1.6](https://github.com/RobinBuschmann/sequelize-typescript/compare/v2.1.5...v2.1.6) (2023-11-24)
+
+
+### Bug Fixes
+
+* deny modifying the object prototype ([#1698](https://github.com/RobinBuschmann/sequelize-typescript/issues/1698)) ([5ce8afd](https://github.com/RobinBuschmann/sequelize-typescript/commit/5ce8afdd1671b08c774ce106b000605ba8fccf78))
+
 # Changelog
@@ -112,2 +121,2 @@
 - `@types/bluebird` is no longer an explicit dependency
-- The official typings are less strict than the former sequelize-typescript ones
+- The official typings are less strict than the former sequelize-typescript ones

dist/shared/object.js

@@ -6,3 +6,3 @@ "use strict";
     sources.forEach((source) => {
-        Object.getOwnPropertyNames(source).forEach((key) => assign(key, target, source));
+        Object.getOwnPropertyNames(source).forEach((key) => !['__proto__', 'constructor', 'prototype'].includes(key) && assign(key, target, source));
         /* istanbul ignore next */
@@ -9,0 +9,0 @@ if (Object.getOwnPropertySymbols) {

package.json

 {
   "name": "sequelize-typescript",
-  "version": "2.1.5",
+  "version": "2.1.6",
   "description": "Decorators and some other features for sequelize",
@@ -11,3 +11,3 @@ "scripts": {
     "lint:fix": "npm run lint -- --fix",
-    "markdownlint": "markdownlint '**/*.md' --ignore node_modules",
+    "markdownlint": "markdownlint '**/*.md' --ignore node_modules --ignore CHANGELOG.md",
     "release": "release-it",
@@ -100,17 +100,17 @@ "_postinstall": "husky install",
   "devDependencies": {
-    "@commitlint/cli": "17.1.2",
-    "@commitlint/config-conventional": "17.1.0",
+    "@commitlint/cli": "17.2.0",
+    "@commitlint/config-conventional": "17.2.0",
     "@release-it/conventional-changelog": "5.1.1",
-    "@types/chai": "4.3.3",
+    "@types/chai": "4.3.4",
     "@types/chai-as-promised": "7.1.5",
     "@types/chai-datetime": "0.0.37",
-    "@types/lodash": "4.14.186",
+    "@types/lodash": "4.14.190",
     "@types/mocha": "9.1.0",
-    "@types/node": "18.11.0",
+    "@types/node": "18.11.9",
     "@types/prettyjson": "0.0.30",
     "@types/sinon": "10.0.11",
-    "@types/sinon-chai": "3.2.8",
-    "@typescript-eslint/eslint-plugin": "5.40.0",
-    "@typescript-eslint/parser": "5.40.0",
-    "chai": "4.3.6",
+    "@types/sinon-chai": "3.2.9",
+    "@typescript-eslint/eslint-plugin": "5.44.0",
+    "@typescript-eslint/parser": "5.42.0",
+    "chai": "4.3.7",
     "chai-as-promised": "7.1.1",
@@ -120,7 +120,7 @@ "chai-datetime": "1.8.0",
     "copyfiles": "2.4.1",
-    "eslint": "8.25.0",
+    "eslint": "8.27.0",
     "eslint-config-prettier": "8.5.0",
     "eslint-plugin-prettier": "4.2.1",
     "has-flag": "5.0.1",
-    "husky": "8.0.1",
+    "husky": "8.0.2",
     "lodash": "4.17.21",
@@ -133,7 +133,7 @@ "markdownlint-cli": "0.32.2",
     "pinst": "3.0.0",
-    "prettier": "2.7.1",
+    "prettier": "2.8.0",
     "prettyjson": "1.2.5",
     "reflect-metadata": "0.1.13",
     "release-it": "15.5.0",
-    "sequelize": "6.25.2",
+    "sequelize": "6.29.0",
     "sinon": "13.0.1",
@@ -140,0 +140,0 @@ "sinon-chai": "3.7.0",

No alert changes

Improved metrics

Total package byte prevSize

215728

increased by0.2%

No dependency changes