update immutable, fix npm references

[calebleavell]

Updates the immutable package to fix a CVE. However, the package no longer distributes updates in the way that bower supports, so that required a change to the places where immutable is used to grab it from npm instead.

https://thryv.atlassian.net/browse/TP-21581

[Copilot]

Pull request overview

Updates the project to use Immutable.js v4 from npm (instead of the bower distribution) to address a reported CVE and keep build/example wiring functional with the new distribution approach.

Changes:

• Bumps immutable dependency to ^4.3.9 and updates the pinned resolution.
• Switches RequireJS/build path mappings from bower_components/immutable to node_modules/immutable/dist/immutable.
• Removes immutable from bower.json dependencies.

Reviewed changes

Copilot reviewed 11 out of 11 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
Plumbing.js	Updates build-time RequireJS path for immutable to read from node_modules.
Gruntfile.js	Updates RequireJS build config to source immutable from node_modules.
package.json	Upgrades Immutable.js to v4 and updates resolutions accordingly.
bower.json	Removes immutable from bower-managed dependencies.
examples/raw.html	Updates example RequireJS path for immutable to node_modules.
examples/raw-inline.html	Updates example RequireJS path for immutable to node_modules.
examples/no-undo-manager.html	Updates example RequireJS path for immutable to node_modules.
examples/build.html	Updates example RequireJS path for immutable to node_modules.
examples/amd.html	Updates example RequireJS path for immutable to node_modules.
examples/amd-inline.html	Updates example RequireJS path for immutable to node_modules.
examples/build-cjs.sh	Updates Browserify immutable reference to node_modules.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.