From 1d269dd2a8bcecc31cf9efb621871d3116490eb3 Mon Sep 17 00:00:00 2001 From: Elizabeth Craig Date: Tue, 7 Apr 2026 17:19:41 -0700 Subject: [PATCH] Bump lodash dev dep --- package.json | 2 ++ yarn.lock | 8 ++++---- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 1d842653..6115a2fc 100644 --- a/package.json +++ b/package.json @@ -53,6 +53,7 @@ "**/@types/glob/@types/minimatch": "^3.0.0", "**/syncpack/minimatch": "^6.2.3", "**/@microsoft/api-extractor/minimatch": "^3.1.5", + "**/@microsoft/api-extractor/lodash": "^4.18.1", "**/@types/chokidar/chokidar": "^3.0.0", "@types/node": "^14.0.0" }, @@ -64,6 +65,7 @@ "**/@types/glob/@types/minimatch": "pin to installed minimatch version, not *", "**/syncpack/minimatch": "unpin to fix security issue", "**/@microsoft/api-extractor/minimatch": "unpin to fix security issue", + "**/@microsoft/api-extractor/lodash": "unpin to fix security issue", "**/@types/chokidar/chokidar": "pin to version matching other chokidar deps, not *" } }, diff --git a/yarn.lock b/yarn.lock index bd18603c..4ad85a71 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2846,10 +2846,10 @@ lodash.merge@^4.6.2: resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a" integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ== -lodash@~4.17.15: - version "4.17.23" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a" - integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w== +lodash@^4.18.1, lodash@~4.17.15: + version "4.18.1" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c" + integrity sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q== lru-cache@^5.1.1: version "5.1.1"