hw-{ledger, ledger-transports}, keyring, networks, util, util-crypto, x-{bigint, fetch, global, randomvalues, textdecoder, textencoder, ws} 13.4.4

Author: github-actions[bot]

CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ## master
 
+- hw-{ledger, ledger-transports}, keyring, networks, util, util-crypto, x-{bigint, fetch, global, randomvalues, textdecoder, textencoder, ws} 13.4.4
 - phishing 0.25.7
 - api, api-{augment, base, contract, derive}, rpc-{augment, core, provider}, types, types-{augment, codec, create, known} 15.9.1
 - phishing 0.25.6

hw-ledger-transports/packageInfo.ts

@@ -1,3 +1,3 @@
 
 
-export const packageInfo = { name: '@polkadot/hw-ledger-transports', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.3' };
+export const packageInfo = { name: '@polkadot/hw-ledger-transports', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.4' };

hw-ledger/packageInfo.ts

@@ -1,3 +1,3 @@
 
 
-export const packageInfo = { name: '@polkadot/hw-ledger', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.3' };
+export const packageInfo = { name: '@polkadot/hw-ledger', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.4' };

keyring/packageInfo.ts

@@ -1,3 +1,3 @@
 
 
-export const packageInfo = { name: '@polkadot/keyring', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.3' };
+export const packageInfo = { name: '@polkadot/keyring', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.4' };

networks/packageInfo.ts

@@ -1,3 +1,3 @@
 
 
-export const packageInfo = { name: '@polkadot/networks', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.3' };
+export const packageInfo = { name: '@polkadot/networks', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.4' };

util-crypto/packageInfo.ts

@@ -1,3 +1,3 @@
 
 
-export const packageInfo = { name: '@polkadot/util-crypto', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.3' };
+export const packageInfo = { name: '@polkadot/util-crypto', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.4' };

util/object/spread.ts

@@ -2,18 +2,32 @@
 /**
  * @name objectSpread
  * @summary Concats all sources into the destination
+ * @description Spreads object properties while maintaining object integrity
  */
 export function objectSpread <T extends object> (dest: object, ...sources: (object | undefined | null)[]): T {
+  const filterProps = new Set(['__proto__', 'constructor', 'prototype']);
+
   for (let i = 0, count = sources.length; i < count; i++) {
     const src = sources[i];
 
     if (src) {
       if (typeof (src as Map<string, unknown>).entries === 'function') {
         for (const [key, value] of (src as Map<string, unknown>).entries()) {
-          (dest as Record<string, unknown>)[key] = value;
+          if (!filterProps.has(key)) {
+            (dest as Record<string, unknown>)[key] = value;
+          }
         }
       } else {
-        Object.assign(dest, src);
+        // Create a clean copy of the source object
+        const sanitizedSrc = Object.create(null) as Record<string, unknown>;
+
+        for (const [key, value] of Object.entries(src)) {
+          if (!filterProps.has(key)) {
+            sanitizedSrc[key] = value;
+          }
+        }
+
+        Object.assign(dest, sanitizedSrc);
       }
     }
   }

util/packageInfo.ts

@@ -1,3 +1,3 @@
 
 
-export const packageInfo = { name: '@polkadot/util', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.3' };
+export const packageInfo = { name: '@polkadot/util', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.4' };

x-bigint/packageInfo.ts

@@ -1,3 +1,3 @@
 
 
-export const packageInfo = { name: '@polkadot/x-bigint', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.3' };
+export const packageInfo = { name: '@polkadot/x-bigint', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.4' };

x-fetch/packageInfo.ts

@@ -1,3 +1,3 @@
 
 
-export const packageInfo = { name: '@polkadot/x-fetch', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.3' };
+export const packageInfo = { name: '@polkadot/x-fetch', path: new URL(import.meta.url).pathname, type: 'deno', version: '13.4.4' };