From 7de01a37f4db8698c3803444caa3475bf6d7a841 Mon Sep 17 00:00:00 2001 From: =?utf8?q?J=C3=A9r=C3=B4me=20Benoit?= Date: Thu, 2 Apr 2026 20:59:02 +0200 Subject: [PATCH] chore(deps): security update of lodash and lodash-es MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Jérôme Benoit --- pnpm-lock.yaml | 30 ++++++++++++++++-------------- pnpm-workspace.yaml | 2 ++ 2 files changed, 18 insertions(+), 14 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index e12d76ea..61b4969b 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -11,6 +11,8 @@ overrides: effect@<3.20.0: '>=3.20.0' form-data@<2.5.4: '>=2.5.4' got@<11.8.5: '>=11.8.5' + lodash-es@<=4.17.23: '>=4.18.0' + lodash@<=4.17.23: '>=4.18.0' minimatch@>=10.0.0 <10.2.3: '>=10.2.3' minimatch@>=9.0.0 <9.0.7: '>=9.0.7' path-to-regexp@>=8.0.0 <8.4.0: '>=8.4.0' @@ -4327,8 +4329,8 @@ packages: resolution: {integrity: sha512-XT9ewWAC43tiAV7xDAPflMkG0qOPn2QjHqlgX8FOqmWa/rxnyYDulF9T0F7tRy1u+TVTmK/M//6VIOye+2zDXg==} engines: {node: '>=20'} - lodash-es@4.17.23: - resolution: {integrity: sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==} + lodash-es@4.18.1: + resolution: {integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==} lodash.camelcase@4.3.0: resolution: {integrity: sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==} @@ -4369,8 +4371,8 @@ packages: lodash.upperfirst@4.3.1: resolution: {integrity: sha512-sReKOYJIJf74dhJONhU4e0/shzi1trVbSWDOhKYE5XV2O+H7Sb2Dihwuc7xWxVl+DgFPyTqIN3zMfT9cq5iWDg==} - lodash@4.17.23: - resolution: {integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==} + lodash@4.18.1: + resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==} log-symbols@4.1.0: resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==} @@ -6790,7 +6792,7 @@ snapshots: d3-time-format: 2.3.0 d3-transition: 1.3.2 endpoint: 0.4.5 - lodash: 4.17.23 + lodash: 4.18.1 minify-stream: 2.1.0 mkdirp: 1.0.4 on-net-listen: 1.1.2 @@ -8452,7 +8454,7 @@ snapshots: async@2.6.4: dependencies: - lodash: 4.17.23 + lodash: 4.18.1 async@3.2.6: {} @@ -9470,7 +9472,7 @@ snapshots: is-core-module: 2.16.1 js-yaml: 3.14.2 json5: 2.2.3 - lodash: 4.17.23 + lodash: 4.18.1 minimatch: 7.4.9 multimatch: 5.0.0 please-upgrade-node: 3.2.0 @@ -10316,7 +10318,7 @@ snapshots: fs-tree-structure@0.0.5: dependencies: - lodash-es: 4.17.23 + lodash-es: 4.18.1 fs.realpath@1.0.0: {} @@ -10724,7 +10726,7 @@ snapshots: cli-width: 2.2.1 external-editor: 3.1.0 figures: 2.0.0 - lodash: 4.17.23 + lodash: 4.18.1 mute-stream: 0.0.7 run-async: 2.4.1 rxjs: 6.6.7 @@ -11138,7 +11140,7 @@ snapshots: get-package-type: 0.1.0 getopts: 2.3.0 interpret: 2.2.0 - lodash: 4.17.23 + lodash: 4.18.1 pg-connection-string: 2.6.2 rechoir: 0.8.0 resolve-from: 5.0.0 @@ -11260,7 +11262,7 @@ snapshots: dependencies: p-locate: 6.0.0 - lodash-es@4.17.23: {} + lodash-es@4.18.1: {} lodash.camelcase@4.3.0: {} @@ -11288,7 +11290,7 @@ snapshots: lodash.upperfirst@4.3.1: {} - lodash@4.17.23: {} + lodash@4.18.1: {} log-symbols@4.1.0: dependencies: @@ -11382,7 +11384,7 @@ snapshots: md5.js@1.3.5: dependencies: - hash-base: 3.0.5 + hash-base: 3.1.2 inherits: 2.0.4 safe-buffer: 5.2.1 @@ -12619,7 +12621,7 @@ snapshots: is-wsl: 3.1.1 json5: 2.2.3 kleur: 4.1.5 - lodash-es: 4.17.23 + lodash-es: 4.18.1 meriyah: 4.5.0 minimatch: 10.2.5 nanospinner: 1.2.2 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 0d1a4107..e39d0ca6 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -9,6 +9,8 @@ overrides: effect@<3.20.0: '>=3.20.0' form-data@<2.5.4: '>=2.5.4' got@<11.8.5: '>=11.8.5' + lodash-es@<=4.17.23: '>=4.18.0' + lodash@<=4.17.23: '>=4.18.0' minimatch@>=10.0.0 <10.2.3: '>=10.2.3' minimatch@>=9.0.0 <9.0.7: '>=9.0.7' path-to-regexp@>=8.0.0 <8.4.0: '>=8.4.0' -- 2.53.0