From 93c9322239f4c7ac1032392e1e857cb422bf81e4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 21 Jan 2026 23:24:46 +0000
Subject: [PATCH] chore(deps): bump lodash from 4.17.21 to 4.17.23

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/fxa-auth-server/package.json    |  2 +-
 packages/fxa-content-server/package.json |  2 +-
 packages/fxa-profile-server/package.json |  2 +-
 yarn.lock                                | 13 ++++++++++---
 4 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/packages/fxa-auth-server/package.json b/packages/fxa-auth-server/package.json
index 81f68bd9816..26dc7c65118 100644
--- a/packages/fxa-auth-server/package.json
+++ b/packages/fxa-auth-server/package.json
@@ -98,7 +98,7 @@
     "jsonwebtoken": "^9.0.2",
     "jwks-rsa": "^3.1.0",
     "keyv": "5.2.1",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "luxon": "^3.5.0",
     "mjml": "^4.15.3",
     "moment-timezone": "^0.5.35",
diff --git a/packages/fxa-content-server/package.json b/packages/fxa-content-server/package.json
index 9e446c8e224..e15724f2c3a 100644
--- a/packages/fxa-content-server/package.json
+++ b/packages/fxa-content-server/package.json
@@ -94,7 +94,7 @@
     "jsxgettext-recursive-next": "1.1.0",
     "legal-docs": "https://github.com/mozilla/legal-docs.git#68a02d3a95f22fb10db68893bb54e49bc0604f69",
     "load-grunt-tasks": "^5.1.0",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "mkdirp": "3.0.1",
     "mocha": "^10.4.0",
     "morgan": "^1.10.0",
diff --git a/packages/fxa-profile-server/package.json b/packages/fxa-profile-server/package.json
index f0d31981c71..b6176a96395 100644
--- a/packages/fxa-profile-server/package.json
+++ b/packages/fxa-profile-server/package.json
@@ -32,7 +32,7 @@
     "convict-format-with-validator": "^6.2.0",
     "fxa-shared": "workspace:*",
     "joi": "^17.13.3",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "mozlog": "^3.0.2",
     "mysql": "^2.18.1",
     "poolee": "^1.0.1",
diff --git a/yarn.lock b/yarn.lock
index ddf510e254a..fc1e6262f5f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -35374,7 +35374,7 @@ __metadata:
     keypair: "npm:1.0.4"
     keyv: "npm:5.2.1"
     load-grunt-tasks: "npm:^5.1.0"
-    lodash: "npm:^4.17.21"
+    lodash: "npm:^4.17.23"
     luxon: "npm:^3.5.0"
     mailparser: "npm:0.6.1"
     mjml: "npm:^4.15.3"
@@ -35523,7 +35523,7 @@ __metadata:
     jsxgettext-recursive-next: "npm:1.1.0"
     legal-docs: "https://github.com/mozilla/legal-docs.git#68a02d3a95f22fb10db68893bb54e49bc0604f69"
     load-grunt-tasks: "npm:^5.1.0"
-    lodash: "npm:^4.17.21"
+    lodash: "npm:^4.17.23"
     mini-css-extract-plugin: "npm:^2.9.2"
     mkdirp: "npm:3.0.1"
     mocha: "npm:^10.4.0"
@@ -35886,7 +35886,7 @@ __metadata:
     fxa-shared: "workspace:*"
     insist: "npm:1.0.1"
     joi: "npm:^17.13.3"
-    lodash: "npm:^4.17.21"
+    lodash: "npm:^4.17.23"
     mocha: "npm:^10.4.0"
     mocha-text-cov: "npm:0.1.1"
     mozlog: "npm:^3.0.2"
@@ -43415,6 +43415,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lodash@npm:^4.17.23":
+  version: 4.17.23
+  resolution: "lodash@npm:4.17.23"
+  checksum: 10c0/1264a90469f5bb95d4739c43eb6277d15b6d9e186df4ac68c3620443160fc669e2f14c11e7d8b2ccf078b81d06147c01a8ccced9aab9f9f63d50dcf8cace6bf6
+  languageName: node
+  linkType: hard
+
 "lodash@npm:~2.4.1":
   version: 2.4.2
   resolution: "lodash@npm:2.4.2"