Suppress CVE-2026-59879 by pulling the latest immutable@^4.3.9

[randytarampi]

🎯 Goal

Per the title.

🛠 Implementation details

Per the commit.

🎨 UI Changes

N/A.

---

Summary by cubic

Update immutable to ^4.3.9 to suppress CVE-2026-59879 and keep the dependency secure. No code or UI changes.

^{Written for commit cb77034. Summary will update on new commits.}

[bonterra-integrations-serviceuser]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[Copilot]

Pull request overview

This PR updates the immutable dependency to ^4.3.9 to address the CVE referenced in the PR title, keeping dependency metadata aligned between the manifest and lockfile.

Changes:

• Bumped immutable from ^4.3.8 to ^4.3.9 in package.json.
• Updated yarn.lock to resolve immutable@npm:^4.3.9 (version, resolution, checksum) and removed the ^4.3.8 lock entry.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates the declared dependency requirement for immutable to ^4.3.9.
yarn.lock	Updates the resolved immutable package entry to 4.3.9 and corresponding metadata.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[cubic-dev-ai]

No issues found across 2 files

_{Re-trigger cubic}