From 054679627cf486029441e8b7cbdb30ab0d443d64 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 22:21:12 +0000
Subject: [PATCH] Bump @nevware21/ts-utils from 0.10.1 to 0.14.0 (#25965)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [@nevware21/ts-utils](https://github.com/nevware21/ts-utils) from
0.10.1 to 0.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nevware21/ts-utils/releases">@​nevware21/ts-utils's
releases</a>.</em></p>
<blockquote>
<h2>0.14.0</h2>
<h2>Changelog</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/525">#525</a>
feat(array): add new array helpers and array-like detection
<ul>
<li>New helpers: <code>isArrayLike</code>, <code>arrUnique</code>,
<code>arrCompact</code>, <code>arrFlatten</code>,
<code>arrGroupBy</code>, <code>arrChunk</code> and export previously
missed <code>isArrayLike</code></li>
</ul>
</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/527">#527</a>
feat(string): add <code>strReplace</code> and <code>strReplaceAll</code>
helpers with refactored internal replacements</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/528">#528</a>
feat(string): add <code>strCapitalizeWords</code> helper</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/529">#529</a>
/ <a
href="https://redirect.github.com/nevware21/ts-utils/pull/530">#530</a>
feat(string): add <code>strTruncate</code>, <code>strCount</code>,
<code>strAt</code>, and <code>strMatchAll</code> helpers with shared
literal regex helper</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/533">#533</a>
feat(array): add <code>arrFlatMap</code> with ES5 polyfill support</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/535">#535</a>
docs(types): add typing utilities for v0.14.0 and expand TSDoc
examples</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/536">#536</a>
feat: add <code>isAsyncIterable</code> and <code>isIntegerInRange</code>
type/value inspection helpers</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/543">#543</a>
feat(string): add <code>strStartsWithAny</code>,
<code>strEndsWithAny</code>, <code>strWrap</code>,
<code>strUnwrap</code>, and <code>strNormalizeNewlines</code>
helpers</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/564">#564</a>
feat(object): add new object utility helpers and harden defaults against
prototype pollution
<ul>
<li>New helpers: <code>objPick</code>, <code>objOmit</code>,
<code>objPickBy</code>, <code>objOmitBy</code> — property selection and
omission with typed overloads</li>
<li>New helpers: <code>objMapValues</code> — create a new object with
values transformed by a mapper function</li>
<li>New helpers: <code>objMergeIf</code>, <code>objDefaults</code> —
conditional merge and shallow defaults (similar to Lodash
<code>_.defaults</code>) hardened against prototype pollution</li>
<li>New helper: <code>objDiff</code> — shallow diff returning only
changed/added keys from a modified object vs a base</li>
<li>New helpers: <code>forEachOwnKey</code>,
<code>forEachOwnKeySafe</code> — iteration over both string and symbol
keys (existing <code>forEachOwnKeySafe</code> was string-only)</li>
<li>New helper: <code>objForEachKeySafe</code> — safe string-key
iteration that filters <code>__proto__</code>, <code>constructor</code>,
<code>prototype</code></li>
<li>Extended <code>isUnsafeTarget</code> coverage to TypedArrays,
<code>ArrayBuffer</code>, <code>DataView</code>, <code>WeakRef</code>,
<code>FinalizationRegistry</code></li>
</ul>
</li>
</ul>
<h3>Security Issue</h3>
<ul>
<li>CVE-2026-46681 Prototype Pollution in objDeepCopy/objCopyProps via
for...in without hasOwnProperty
<ul>
<li>Also affected <code>setValueByKey</code> and
<code>setValueByIter</code></li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/565">#565</a>
feat: add prototype-pollution guards and array key helpers</li>
</ul>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/558">#558</a>
Fix ES2015 built-in type errors in consumers by adding lib reference
directive to published declarations
<ul>
<li>Consumers using <code>&quot;lib&quot;: [&quot;ES5&quot;,
&quot;DOM&quot;]</code> (or omitting <code>lib</code>) received
<code>Cannot find name 'Symbol'</code> / <code>Cannot find name
'Iterator'</code> errors because the published <code>.d.ts</code>
exposed ES2015 types without declaring the dependency</li>
<li>Added <code>/// &lt;reference lib=&quot;es2015&quot; /&gt;</code> to
the source entry points (<code>index.ts</code>,
<code>polyfills.ts</code>) and a new post-processing script
(<code>lib/scripts/setTsReferences.js</code>) that prepends the
directive to the api-extractor bundled output (api-extractor strips
these directives from its rollup)</li>
<li>Added <code>&quot;lib&quot;: [&quot;ES2015&quot;,
&quot;DOM&quot;]</code> to all library and test <code>tsconfig</code>
files for consistent compile-time validation</li>
<li>Net effect: consumers no longer need to add
<code>&quot;ES2015&quot;</code> to their own <code>tsconfig.json</code>
lib settings</li>
</ul>
</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/issues/561">#561</a>
Bug: Falsy <code>thisArg</code> (0, <code>''</code>, <code>false</code>)
overridden in
<code>arrForEach</code>/<code>iterForOf</code>/<code>objForEachKey</code>
<ul>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/566">#566</a>
Fix falsy <code>thisArg</code> (0, <code>''</code>, <code>false</code>)
being overridden in <code>arrForEach</code>, <code>iterForOf</code>,
<code>objForEachKey</code></li>
</ul>
</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/562">#562</a>
Fix <code>thisArg</code> binding in <code>polyArrFindIndex</code> /
<code>polyArrFindLastIndex</code> polyfills</li>
</ul>
<h3>Repository Improvements</h3>
<ul>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/549">#549</a>
Drop Node.js 16 from CI matrix and add Node.js 24</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/552">#552</a>
Upgrade Grunt devDependency to v1.6.2</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/554">#554</a>
Add funding metadata to published package manifests</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/556">#556</a>
Add release PR instructions to Copilot instructions</li>
</ul>
<p><a
href="https://github.com/nevware21/ts-utils/compare/v0.13.0...v0.14.0">Full
Changelog</a></p>
<h2>0.13.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nevware21/ts-utils/blob/main/CHANGELOG.md">@​nevware21/ts-utils's
changelog</a>.</em></p>
<blockquote>
<h1>v0.14.0 May 18th, 2026</h1>
<h2>Changelog</h2>
<h3>Features</h3>
<ul>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/525">#525</a>
feat(array): add new array helpers and array-like detection
<ul>
<li>New helpers: <code>isArrayLike</code>, <code>arrSlice</code>, and
other array utility improvements</li>
</ul>
</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/527">#527</a>
feat(string): add <code>strReplace</code> and <code>strReplaceAll</code>
helpers with refactored internal replacements</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/528">#528</a>
feat(string): add <code>strCapitalizeWords</code> helper</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/529">#529</a>
/ <a
href="https://redirect.github.com/nevware21/ts-utils/pull/530">#530</a>
feat(string): add <code>strTruncate</code>, <code>strCount</code>,
<code>strAt</code>, and <code>strMatchAll</code> helpers with shared
literal regex helper</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/533">#533</a>
feat(array): add <code>arrFlatMap</code> with ES5 polyfill support</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/535">#535</a>
docs(types): add typing utilities for v0.14.0 and expand TSDoc
examples</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/536">#536</a>
feat: add <code>isAsyncIterable</code> and <code>isIntegerInRange</code>
type/value inspection helpers</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/543">#543</a>
feat(string): add <code>strStartsWithAny</code>,
<code>strEndsWithAny</code>, <code>strWrap</code>,
<code>strUnwrap</code>, and <code>strNormalizeNewlines</code>
helpers</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/564">#564</a>
feat(object): add new object utility helpers and harden defaults against
prototype pollution
<ul>
<li>New helpers: <code>objPick</code>, <code>objOmit</code>,
<code>objPickBy</code>, <code>objOmitBy</code> — property selection and
omission with typed overloads</li>
<li>New helpers: <code>objMapValues</code> — create a new object with
values transformed by a mapper function</li>
<li>New helpers: <code>objMergeIf</code>, <code>objDefaults</code> —
conditional merge and shallow defaults (similar to Lodash
<code>_.defaults</code>) hardened against prototype pollution</li>
<li>New helper: <code>objDiff</code> — shallow diff returning only
changed/added keys from a modified object vs a base</li>
<li>New helpers: <code>forEachOwnKey</code>,
<code>forEachOwnKeySafe</code> — iteration over both string and symbol
keys (existing <code>forEachOwnKeySafe</code> was string-only)</li>
<li>New helper: <code>objForEachKeySafe</code> — safe string-key
iteration that filters <code>__proto__</code>, <code>constructor</code>,
<code>prototype</code></li>
<li>Extended <code>isUnsafeTarget</code> coverage to TypedArrays,
<code>ArrayBuffer</code>, <code>DataView</code>, <code>WeakRef</code>,
<code>FinalizationRegistry</code></li>
</ul>
</li>
</ul>
<h3>Security Issue</h3>
<ul>
<li>CVE-2026-46681 Prototype Pollution in objDeepCopy/objCopyProps via
for...in without hasOwnProperty
<ul>
<li>Also affected <code>setValueByKey</code> and
<code>setValueByIter</code></li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/565">#565</a>
feat: add prototype-pollution guards and array key helpers</li>
</ul>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/558">#558</a>
Fix ES2015 built-in type errors in consumers by adding lib reference
directive to published declarations
<ul>
<li>Consumers using <code>&quot;lib&quot;: [&quot;ES5&quot;,
&quot;DOM&quot;]</code> (or omitting <code>lib</code>) received
<code>Cannot find name 'Symbol'</code> / <code>Cannot find name
'Iterator'</code> errors because the published <code>.d.ts</code>
exposed ES2015 types without declaring the dependency</li>
<li>Added <code>/// &lt;reference lib=&quot;es2015&quot; /&gt;</code> to
the source entry points (<code>index.ts</code>,
<code>polyfills.ts</code>) and a new post-processing script
(<code>lib/scripts/setTsReferences.js</code>) that prepends the
directive to the api-extractor bundled output (api-extractor strips
these directives from its rollup)</li>
<li>Added <code>&quot;lib&quot;: [&quot;ES2015&quot;,
&quot;DOM&quot;]</code> to all library and test <code>tsconfig</code>
files for consistent compile-time validation</li>
<li>Net effect: consumers no longer need to add
<code>&quot;ES2015&quot;</code> to their own <code>tsconfig.json</code>
lib settings</li>
</ul>
</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/issues/561">#561</a>
Bug: Falsy <code>thisArg</code> (0, <code>''</code>, <code>false</code>)
overridden in
<code>arrForEach</code>/<code>iterForOf</code>/<code>objForEachKey</code>
<ul>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/566">#566</a>
Fix falsy <code>thisArg</code> (0, <code>''</code>, <code>false</code>)
being overridden in <code>arrForEach</code>, <code>iterForOf</code>,
<code>objForEachKey</code></li>
</ul>
</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/562">#562</a>
Fix <code>thisArg</code> binding in <code>polyArrFindIndex</code> /
<code>polyArrFindLastIndex</code> polyfills</li>
</ul>
<h3>Repository Improvements</h3>
<ul>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/549">#549</a>
Drop Node.js 16 from CI matrix and add Node.js 24</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/552">#552</a>
Upgrade Grunt devDependency to v1.6.2</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/554">#554</a>
Add funding metadata to published package manifests</li>
<li><a
href="https://redirect.github.com/nevware21/ts-utils/pull/556">#556</a>
Add release PR instructions to Copilot instructions</li>
</ul>
<h3>Dependency Updates</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nevware21/ts-utils/commit/45cb369cc8d67dfdfb68463e7ea129d4005802e2"><code>45cb369</code></a>
[Release] Increase version to 0.14.0 (<a
href="https://redirect.github.com/nevware21/ts-utils/issues/567">#567</a>)</li>
<li><a
href="https://github.com/nevware21/ts-utils/commit/5e887f4e2fbee7160c8f501634c45e6a229e83bb"><code>5e887f4</code></a>
Add new object utility helpers and harden defaults against prototype
pollutio...</li>
<li><a
href="https://github.com/nevware21/ts-utils/commit/0a486d316c85185809b5892bf35cb3ca414815a3"><code>0a486d3</code></a>
Bug: Falsy thisArg (0, '', false) overridden in
arrForEach/iterForOf/objForEa...</li>
<li><a
href="https://github.com/nevware21/ts-utils/commit/9362b6ee0c3553e79e4df5adc3019e2a35c5224c"><code>9362b6e</code></a>
Bump puppeteer from 24.43.1 to 25.0.2 (<a
href="https://redirect.github.com/nevware21/ts-utils/issues/559">#559</a>)</li>
<li><a
href="https://github.com/nevware21/ts-utils/commit/d65f853c235f36adce78878177c125b261720803"><code>d65f853</code></a>
Fix <code>thisArg</code> binding in <code>polyArrFindIndex</code> /
<code>polyArrFindLastIndex</code> polyfill...</li>
<li><a
href="https://github.com/nevware21/ts-utils/commit/26b4766b57197c6fab2da4ad21b6474c4359f42f"><code>26b4766</code></a>
Add prototype-pollution guards and array key helpers (<a
href="https://redirect.github.com/nevware21/ts-utils/issues/565">#565</a>)</li>
<li><a
href="https://github.com/nevware21/ts-utils/commit/4d28559a577dadde7775caed196bd2df39574a31"><code>4d28559</code></a>
Fix ES2015 built-in type errors in consumers by adding lib reference
directiv...</li>
<li><a
href="https://github.com/nevware21/ts-utils/commit/da838a4ac91bbbf1cfbbdf01fc2c7d1f7f13a30e"><code>da838a4</code></a>
docs: add release PR instructions to copilot instructions (<a
href="https://redirect.github.com/nevware21/ts-utils/issues/556">#556</a>)</li>
<li><a
href="https://github.com/nevware21/ts-utils/commit/97d40a2a2ded7a64330590cfac7ec7ac26ae600e"><code>97d40a2</code></a>
Add funding metadata to published package manifests (<a
href="https://redirect.github.com/nevware21/ts-utils/issues/554">#554</a>)</li>
<li><a
href="https://github.com/nevware21/ts-utils/commit/287f7c961a01ad086d28b8bae19db46ba027adda"><code>287f7c9</code></a>
Upgrade Grunt devDependency to v1.6.2 (<a
href="https://redirect.github.com/nevware21/ts-utils/issues/552">#552</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nevware21/ts-utils/compare/0.10.1...0.14.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~nevware21bot">nevware21bot</a>, a new
releaser for <code>@​nevware21/ts-utils</code> since your current
version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@nevware21/ts-utils&package-manager=npm_and_yarn&previous-version=0.10.1&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/microsoft/vscode-python/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package-lock.json | 22 ++++++++++++++++------
 1 file changed, 16 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 82053df77576..805e8f823fd7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1500,9 +1500,19 @@
             }
         },
         "node_modules/@nevware21/ts-utils": {
-            "version": "0.10.1",
-            "resolved": "https://registry.npmjs.org/@nevware21/ts-utils/-/ts-utils-0.10.1.tgz",
-            "integrity": "sha512-pMny25NnF2/MJwdqC3Iyjm2pGIXNxni4AROpcqDeWa+td9JMUY4bUS9uU9XW+BoBRqTLUL+WURF9SOd/6OQzRg=="
+            "version": "0.14.0",
+            "resolved": "https://registry.npmjs.org/@nevware21/ts-utils/-/ts-utils-0.14.0.tgz",
+            "integrity": "sha512-WoeqTIXQ8WPhl+lD2NbMHoAQ4sJl0n7EoRoDmVJui//Usg512enl9q1fdbVobuZt3omnxnmVsDrNIvPBvFgddQ==",
+            "funding": [
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/nevware21"
+                },
+                {
+                    "type": "other",
+                    "url": "https://buymeacoffee.com/nevware21"
+                }
+            ]
         },
         "node_modules/@nicolo-ribaudo/semver-v6": {
             "version": "6.3.3",
@@ -16675,9 +16685,9 @@
             }
         },
         "@nevware21/ts-utils": {
-            "version": "0.10.1",
-            "resolved": "https://registry.npmjs.org/@nevware21/ts-utils/-/ts-utils-0.10.1.tgz",
-            "integrity": "sha512-pMny25NnF2/MJwdqC3Iyjm2pGIXNxni4AROpcqDeWa+td9JMUY4bUS9uU9XW+BoBRqTLUL+WURF9SOd/6OQzRg=="
+            "version": "0.14.0",
+            "resolved": "https://registry.npmjs.org/@nevware21/ts-utils/-/ts-utils-0.14.0.tgz",
+            "integrity": "sha512-WoeqTIXQ8WPhl+lD2NbMHoAQ4sJl0n7EoRoDmVJui//Usg512enl9q1fdbVobuZt3omnxnmVsDrNIvPBvFgddQ=="
         },
         "@nicolo-ribaudo/semver-v6": {
             "version": "6.3.3",