[Snyk] Security upgrade immutable from 3.7.6 to 4.3.9

[mm-prodsec-bot]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• webapp/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Integer Overflow or Wraparound SNYK-JS-IMMUTABLE-17900573	710

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Integer Overflow or Wraparound

[mm-prodsec-bot]

This major version upgrade from immutable.js v3 to v4 introduces significant breaking changes that will likely require code modifications.

Key Breaking Changes:

• Record is no longer a Collection: Record instances no longer have sequence methods like .map() or .filter(). isCollection(myRecord) will now return false.
• merge() and mergeDeep() Behavior: The behavior of merge() and mergeDeep() has changed. Previously, they performed a deep conversion using fromJS(). Now, they only perform a shallow conversion, which may alter the behavior of your code.
• Iterable Renamed to Collection: The base class Iterable has been renamed to Collection.
• toJSON() Behavior: The toJSON() method now performs a shallow conversion instead of a deep one. toJS() remains for deep conversions.
• Cursor API Deprecated: The Cursor API is now officially deprecated and has been moved to the immutable-cursor package.
• undefined in Record: Assigning undefined to a Record key now resets it to the default value, whereas in v3 it would set the value to undefined.

Recommendation:
Due to the number and significance of these breaking changes, a thorough review and testing of your application's usage of immutable.js is required. Pay close attention to usages of Record, merge(), and Cursor.

Source: Changelog

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 67321618-ea86-4610-8ad9-1c3452b51438

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch snyk-fix-6079e410bf6e404a1c6fac2aeaef80cf

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}