chore(release): 1.21.0 [skip ci]

# [1.21.0](v1.20.0...v1.21.0) (2026-01-04)

### Bug Fixes

* **ci:** address issues ([f6f63dd](f6f63dd))
* prevent prototype pollution in extend function ([468d253](468d253))

### Features

* **vk:** Add required 'v' API version parameter to VK API requests ([da2b6d1](da2b6d1)), closes [#544](#544)

Author: semantic-release-bot

CHANGELOG.md

@@ -1,3 +1,16 @@
+# [1.21.0](https://github.com/MrSwitch/hello.js/compare/v1.20.0...v1.21.0) (2026-01-04)
+
+
+### Bug Fixes
+
+* **ci:** address issues ([f6f63dd](https://github.com/MrSwitch/hello.js/commit/f6f63dd5cdf0e2c4ea81fff3fbd9b523b6145bd5))
+* prevent prototype pollution in extend function ([468d253](https://github.com/MrSwitch/hello.js/commit/468d2532d8380faa606aa98e81be0f47fca890fc))
+
+
+### Features
+
+* **vk:** Add required 'v' API version parameter to VK API requests ([da2b6d1](https://github.com/MrSwitch/hello.js/commit/da2b6d195d4cab50e113180eba43230210891083)), closes [#544](https://github.com/MrSwitch/hello.js/issues/544)
+
 # [1.20.0](https://github.com/MrSwitch/hello.js/compare/v1.19.5...v1.20.0) (2023-01-25)
 
 

dist/hello.all.js

@@ -1,4 +1,4 @@
-/*! hellojs v1.20.0 - (c) 2012-2023 Andrew Dodson - MIT https://adodson.com/hello.js/LICENSE */
+/*! hellojs v1.21.0 - (c) 2012-2026 Andrew Dodson - MIT https://adodson.com/hello.js/LICENSE */
 // ES5 Object.create
 if (!Object.create) {
 
@@ -171,6 +171,7 @@ hello.utils = {
 
 	// Extend the first object with the properties and methods of the second
 	extend: function(r /*, a[, b[, ...]] */) {
+		const dangerousKeys = ['__proto__', 'constructor', 'prototype'];
 
 		// Get the arguments as an array but ommit the initial item
 		Array.prototype.slice.call(arguments, 1).forEach(function(a) {
@@ -180,7 +181,7 @@ hello.utils = {
 			else if (r && (r instanceof Object || typeof r === 'object') && a && (a instanceof Object || typeof a === 'object') && r !== a) {
 				for (var x in a) {
 					// Prevent prototype pollution
-					if (x === '__proto__' || x === 'constructor') {
+					if (dangerousKeys.includes(x)) {
 						continue;
 					}
 
@@ -5555,6 +5556,7 @@ if (typeof chrome === 'object' && typeof chrome.identity === 'object' && chrome.
 			get: {
 				me: function(p, callback) {
 					p.query.fields = 'id,first_name,last_name,photo_max';
+					p.query.v = '5.131';
 					callback('users.get');
 				}
 			},

dist/hello.all.min.js

@@ -1,4 +1,4 @@
-/*! hellojs v1.20.0 - (c) 2012-2023 Andrew Dodson - MIT https://adodson.com/hello.js/LICENSE */
+/*! hellojs v1.21.0 - (c) 2012-2026 Andrew Dodson - MIT https://adodson.com/hello.js/LICENSE */
 // ES5 Object.create
 if (!Object.create) {
 
@@ -171,6 +171,7 @@ hello.utils = {
 
 	// Extend the first object with the properties and methods of the second
 	extend: function(r /*, a[, b[, ...]] */) {
+		const dangerousKeys = ['__proto__', 'constructor', 'prototype'];
 
 		// Get the arguments as an array but ommit the initial item
 		Array.prototype.slice.call(arguments, 1).forEach(function(a) {
@@ -180,7 +181,7 @@ hello.utils = {
 			else if (r && (r instanceof Object || typeof r === 'object') && a && (a instanceof Object || typeof a === 'object') && r !== a) {
 				for (var x in a) {
 					// Prevent prototype pollution
-					if (x === '__proto__' || x === 'constructor') {
+					if (dangerousKeys.includes(x)) {
 						continue;
 					}
 

dist/hello.js

@@ -1,6 +1,6 @@
 {
   "name": "hellojs",
-  "version": "1.20.0",
+  "version": "1.21.0",
   "description": "A clientside Javascript library for standardizing requests to OAuth2 web services (and OAuth1 - with a shim)",
   "homepage": "https://adodson.com/hello.js",
   "main": "dist/hello.all.js",