From 141a87efa35315418d261a45f3b471ad3bdca783 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 18 Mar 2020 09:01:42 +0000 Subject: [PATCH] fix: upgrade lodash from 4.17.4 to 4.17.15 Snyk has created this PR to upgrade lodash from 4.17.4 to 4.17.15. See this package in NPM: https://www.npmjs.com/package/lodash See this project in Snyk: https://app.snyk.io/org/jmatsushita/project/358b4e0c-38d1-40e5-825b-2741c72d9602?utm_source=github&utm_medium=upgrade-pr --- package.json | 2 +- yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index c107a264..92afa8ff 100644 --- a/package.json +++ b/package.json @@ -92,7 +92,7 @@ "got": "^7.0.0", "isstream": "^0.1.2", "left-split": "^1.0.0", - "lodash": "^4.0.0", + "lodash": "^4.17.15", "meow": "^3.7.0", "source-map": "^0.5.3", "through2": "^2.0.0", diff --git a/yarn.lock b/yarn.lock index f5fc516e..4c7a68fd 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2747,6 +2747,11 @@ lodash@^4.0.0, lodash@^4.13.1, lodash@^4.14.0, lodash@^4.17.3, lodash@^4.17.4, l version "4.17.4" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae" +lodash@^4.17.15: + version "4.17.15" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548" + integrity sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A== + log-symbols@^1.0.2: version "1.0.2" resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-1.0.2.tgz#376ff7b58ea3086a0f09facc74617eca501e1a18"