build(deps): bump deepmerge-ts from 7.1.6 to 8.0.0 in the npm_and_yarn group across 1 directory

[dependabot]

Bumps the npm_and_yarn group with 1 update in the / directory: deepmerge-ts.

Updates deepmerge-ts from 7.1.6 to 8.0.0

Changelog

Sourced from deepmerge-ts's changelog.

8.0.0 (2026-08-16)

Bug Fixes

• stop deepmergeInto from leak-mutating nested input containers (2cd7824)

Code Refactoring

• rename mergeInfo system and align shorthand, add JSDoc examples (590ed9b)

Features

• add circular reference support, maxDepth option, and hierarchy tracking (#707) (3984927)
• add deepmergeFastUnsafe and deepmergeIntoFastUnsafe entrypoints (#708) (df9b11c)
• support deep map value merging (ac4bf7a), closes #705

Performance Improvements

• add a dedicated fast path for merging 2 records (4dbcea7)
• avoid array reallocation when no undefined values exist (99f2241), closes #696
• optimize array and set merging (8d435f9), closes #698
• optimize map merging and remove dead code (14e1604), closes #702
• optimize record key and type detection (fa85462), closes #694
• reduce benchmark sample count so the bench fits in 512MB heap (66635e3)
• reduce type-level work and shortcut same-type merges (473a971)
• speed up the mergeUnknowns hot path (95b2964), closes #699

BREAKING CHANGES

• deepmergeInto no longer leak-mutates input containers. Code that depended on inputs being merged into the target through alias must now pass copies explicitly. The documented 'update the target' behavior is preserved on the target itself.
• • DeepMergeMetaMetaData has been renamed to DeepMergeMergeInfo. Imports must be updated.

• The MetaDataUpdater callback's metaMeta parameter is now mergeInfo. Implementations must update the parameter name accordingly.
• The MM generic shorthand has been renamed to MI (e.g. in MetaDataUpdater<M, MI>).

• The DeepMergeIntoFunctionUtils type has been renamed to DeepMergeIntoUtils.
• Updates the internal calculation logic for mergeMaps and mergeMapsInto. Colliding keys will now be merged.

Commits

• 188dba4 chore(release): 8.0.0 [skip ci]
• 57e4403 Merge pull request #712 from RebeccaStevens/dev
• f7ebf92 test: cover semantics, containers, and types across all variants
• af8e57e chore: update the type benchmark baseline
• 66635e3 perf: reduce benchmark sample count so the bench fits in 512MB heap
• 1589755 test: complete benchmark coverage for deepmerge-ts variants
• 2cd7824 fix!: stop deepmergeInto from leak-mutating nested input containers
• 1aae238 refactor: re-export DeepMergeMetaMetaData as a deprecated alias for DeepMerge...
• 590ed9b refactor!: rename mergeInfo system and align shorthand, add JSDoc examples
• 3258db3 refactor: reorder fast variant overloads and meta-updater helpers, fix IDE to...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​deepmerge-ts@​7.1.6 ⏵ 8.0.0		+16		+3

View full report