chore(deps): bump es-toolkit from 1.39.10 to 1.42.0

[dependabot]

Bumps es-toolkit from 1.39.10 to 1.42.0.

Release notes

Sourced from es-toolkit's releases.

v1.42.0

Released on November 17th, 2025.

• Added new async utilities: filterAsync, flatMapAsync, forEachAsync, mapAsync, reduceAsync, and limitAsync for handling asynchronous operations.
• Exported ThrottleOptions and DebounceOptions interfaces for better type support.
• Fixed isFinite to implement type predicate to narrow type to number.
• Fixed isSafeInteger to implement type predicate to narrow type to number.
• Fixed omit to prevent adding index properties to array-like objects.
• Fixed mergeWith to remove unnecessary nullish coalescing for 100% branch coverage.
• Fixed compat/updateWith to remove unreachable code and add prototype pollution test.
• Updated documentation headings for consistency.
• Improved test coverage for compat/mergeWith, compat/unset, get, toMerged, mergeWith, and compat/intersectionBy with additional edge cases and security tests.

We sincerely thank @​Debbl, @​wo-o29, @​raon0211, @​Yeom-JinHo, @​sukvvon, and @​D-Sketon for their contributions. We appreciate your great efforts!

v1.41.0

Released on October 24th, 2025.

• Enhanced throttle to preserve this context when called as a method.
• Added type guard support for partition function.
• Fixed omit to support runtime-determined key arrays with proper overloads.
• Fixed defaults in compatibility layer to properly handle undefined and null sources.
• Fixed toSnakeCaseKeys and toCamelCaseKeys to correctly return types for non-plain objects.
• Fixed toMerged and mergeWith to properly handle shared objects in merge logic.
• Fixed compat/union to support array-like objects.
• Fixed compat/updateWith to use get for value retrieval in updater function.
• Fixed circular import between isMatch and isMatchWith.
• Fixed find and findLast by simplifying logic and removing unnecessary checks.
• Fixed takeRight by improving test coverage and removing redundant checks.
• Fixed curry and curryRight by removing unnecessary type assertions.
• Fixed isEqualWith and mapKeys by removing unnecessary type assertions.
• Improved performance for meanBy by removing intermediate array creation.
• Updated build system to use UMD format instead of IIFE for browser builds.
• Fixed numerous documentation examples across compat modules.
• Improved test coverage with additional test cases for edge cases and compatibility.

We sincerely thank @​the5thbeatle, @​wo-o29, @​hwibaski, @​manudeli, @​raon0211, @​dayongkr, @​D-Sketon, @​yoouungyoung, @​Dohun-choi, @​sukvvon, @​zoulou00, and @​sen2y for their contributions. We appreciate your great efforts!

v1.40.0

Released on October 8th, 2025.

• Enhanced sumBy to pass the element index to the getValue callback function.
• Improved performance for uniq function.
• Fixed cloneDeepWith to handle runtime errors in environments without Blob support and correctly clone Boolean, Number, and String objects.
• Fixed omit to avoid unnecessary deep cloning, improving performance.
• Fixed toCamelCaseKeys to properly handle PascalCase type conversion.
• Fixed toPath to correctly handle arrays and non-string inputs.
• Fixed repeat to validate and handle invalid repeat counts.
• Fixed sortedIndexBy to properly handle default iteratee.
• Fixed some predicate check to correctly handle null and undefined cases.

... (truncated)

Changelog

Sourced from es-toolkit's changelog.

Version v1.42.0

Released on November 17th, 2025.

• Added new async utilities: filterAsync, flatMapAsync, forEachAsync, mapAsync, reduceAsync, and limitAsync for handling asynchronous operations.
• Exported ThrottleOptions and DebounceOptions interfaces for better type support.
• Fixed isFinite to implement type predicate to narrow type to number.
• Fixed isSafeInteger to implement type predicate to narrow type to number.
• Fixed omit to prevent adding index properties to array-like objects.
• Fixed mergeWith to remove unnecessary nullish coalescing for 100% branch coverage.
• Fixed compat/updateWith to remove unreachable code and add prototype pollution test.
• Updated documentation headings for consistency.
• Improved test coverage for compat/mergeWith, compat/unset, get, toMerged, mergeWith, and compat/intersectionBy with additional edge cases and security tests.

We sincerely thank @​Debbl, @​wo-o29, @​raon0211, @​Yeom-JinHo, @​sukvvon, and @​D-Sketon for their contributions. We appreciate your great efforts!

Version v1.41.0

Released on October 24th, 2025.

• Enhanced throttle to preserve this context when called as a method.
• Added type guard support for partition function.
• Fixed omit to support runtime-determined key arrays with proper overloads.
• Fixed defaults in compatibility layer to properly handle undefined and null sources.
• Fixed toSnakeCaseKeys and toCamelCaseKeys to correctly return types for non-plain objects.
• Fixed toMerged and mergeWith to properly handle shared objects in merge logic.
• Fixed compat/union to support array-like objects.
• Fixed compat/updateWith to use get for value retrieval in updater function.
• Fixed circular import between isMatch and isMatchWith.
• Fixed find and findLast by simplifying logic and removing unnecessary checks.
• Fixed takeRight by improving test coverage and removing redundant checks.
• Fixed curry and curryRight by removing unnecessary type assertions.
• Fixed isEqualWith and mapKeys by removing unnecessary type assertions.
• Improved performance for meanBy by removing intermediate array creation.
• Updated build system to use UMD format instead of IIFE for browser builds.
• Fixed numerous documentation examples across compat modules.
• Improved test coverage with additional test cases for edge cases and compatibility.

We sincerely thank @​the5thbeatle, @​wo-o29, @​hwibaski, @​manudeli, @​raon0211, @​dayongkr, @​D-Sketon, @​yoouungyoung, @​Dohun-choi, @​sukvvon, @​zoulou00, and @​sen2y for their contributions. We appreciate your great efforts!

Version v1.40.0

Released on October 8th, 2025.

• Enhanced sumBy to pass the element index to the getValue callback function.
• Improved performance for uniq function.
• Fixed cloneDeepWith to handle runtime errors in environments without Blob support and correctly clone Boolean, Number, and String objects.
• Fixed omit to avoid unnecessary deep cloning, improving performance.
• Fixed toCamelCaseKeys to properly handle PascalCase type conversion.
• Fixed toPath to correctly handle arrays and non-string inputs.

... (truncated)

Commits

• 2fe1564 v1.42.0
• a61e107 feat: export ThrottleOptions and DebounceOptions interfaces (#1507)
• 16a73d2 test(compat/mergeWith): add missing test cases for edge cases and improve cov...
• ef6ab6b fix(compat/updateWith): remove unreachable code and add prototype pollution t...
• 0be8841 test(compat/unset): add comprehensive prototype pollution tests (#1519)
• c6d4643 test: add proto security and edge case tests for get function (#1520)
• 506695c fix(mergeWith): Remove unnecessary nullish coalescing to achieve 100% branch ...
• 5d098e8 [autofix.ci] apply automated fixes
• 3ce0b3a fix lint
• f80f90a Add functions to barrel file
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for es-toolkit since your current version.

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[tbouffard]

✔️ All checks pass
✔️ Changelog and release-notes reviewed. Nothing impactful for us. Throttle changes reviewed.
✔️ Tested locally with the artifact built by GH Actions

@dependabot squash and merge

[dependabot]

Beginning January 27, 2026, Dependabot will no longer support the @dependabot squash and merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.