updated lodash and lodash.merge dependencies to newer version. (#16214)

Versions of lodash before 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep allows a malicious user to modify the prototype of Object via {constructor: {prototype: {...}}} causing the addition or modification of an existing property that will exist on all objects. CVE-2019-10744 Co-authored-by: Andrii Kozin <[email protected]>
microsoft · May 10, 2022 · 634a6eb · 634a6eb
1 parent 7a764c1
commit 634a6eb
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 12 deletions.
diff --git a/Tasks/AppCenterTestV1/package-lock.json b/Tasks/AppCenterTestV1/package-lock.json
diff --git a/Tasks/AppCenterTestV1/task.json b/Tasks/AppCenterTestV1/task.json
@@ -12,7 +12,7 @@
     "author": "Microsoft Corporation",
     "version": {
         "Major": 1,
-        "Minor": 198,
+        "Minor": 205,
         "Patch": 0
     },
     "groups": [

diff --git a/Tasks/AppCenterTestV1/task.loc.json b/Tasks/AppCenterTestV1/task.loc.json
@@ -12,7 +12,7 @@
   "author": "Microsoft Corporation",
   "version": {
     "Major": 1,
-    "Minor": 198,
+    "Minor": 205,
     "Patch": 0
   },
   "groups": [