chore(deps): bump immer from 9.0.21 to 11.1.17

[dependabot]

Bumps immer from 9.0.21 to 11.1.17.

Release notes

Sourced from immer's releases.

v11.1.17

11.1.17 (2026-08-16)

Bug Fixes

• preserve structural sharing for no-op array-methods calls (0c3efdd)

v11.1.16

11.1.16 (2026-08-05)

Bug Fixes

• key inserted array indices by name in the array-methods plugin (e3df956)

v11.1.15

11.1.15 (2026-07-16)

Bug Fixes

• correct curried produceWithPatches return type (#1249) (a3be9df), closes #1045

v11.1.14

11.1.14 (2026-07-16)

Bug Fixes

• throw proper immer error when applyPatches path traverses null (#1251) (e38ad71)

v11.1.13

11.1.13 (2026-07-16)

Bug Fixes

• draft relocated base refs after reverse/sort in array-methods plugin (#1255) (a73672a)

v11.1.12

11.1.12 (2026-07-16)

Bug Fixes

• Revert "prevent prototype pollution via constructor.prototype access (CVE-2026-XXXX) (#1259)" (#1271) (4d3d6ff), closes #1266 #1268 #1265

v11.1.11

11.1.11 (2026-07-03)

... (truncated)

Commits

• 907395a Merge pull request #1289 from maximilliangrand/fix/array-methods-noop-structu...
• 9491138 Skip new references for arrays when sort or reverse is a no-op
• eea464f Ensure array methods really do no-op correctly
• 0f158b3 Add additional tests for array method cases
• 5945e47 Fix existing copy usage check in getValue
• 0c3efdd fix: preserve structural sharing for no-op array-methods calls
• d2c158f Merge pull request #1283 from Jaybhade/fix/array-methods-assigned-index-key
• e3df956 fix: key inserted array indices by name in the array-methods plugin
• a3be9df fix: correct curried produceWithPatches return type (#1249)
• 7cab3c2 ci: harden GitHub Actions workflows (SHA-pin, permissions, persist-credential...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for immer since your current version.

[changeset-bot]

🦋 Changeset detected

Latest commit: b071ada

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@equinor/fusion-framework-module-state	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[odinr]

Dependency research: immer 9.0.21 → 11.1.17

• This is a two-major-version jump, but immer is not actually imported anywhere in packages/modules/state's source — it's a declared-but-unused dependency in that package, so this bump has no functional impact here.
• Other packages in this repo (bookmark, observable, app, widget, feature-flag, query) already depend on immer ^11.0.0 and only use named imports (produce, castDraft, createDraft, finishDraft, immerable, enableMapSet, isDraft) — none use the removed default export, so the v9→v10 breaking changes (default export removed, enableAllPlugins removed, ES5 mode dropped, getters/setters ignored on plain objects) don't apply to this codebase.
• Note: v11.1.9 briefly shipped a prototype-pollution "CVE" fix that was reverted in v11.1.12 after the maintainer determined it wasn't a real vulnerability and it broke lodash.isEmpty/fast-deep-equal compatibility for consumers. v11.1.17 (this target) is after that revert, so no lingering issue.
• Added a patch changeset for @equinor/fusion-framework-module-state (missing changeset was flagged by changeset-bot).

Waiting on CI to go green before recommending merge.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	67.37%	4052 / 6014
🔵	Statements	67.09%	4821 / 7185
🔵	Functions	53.7%	1385 / 2579
🔵	Branches	55.95%	2137 / 3819

File Coverage

No changed files found.

Generated in workflow #15487 for commit b071ada by the Vitest Coverage Report Action