From 87ee5f763ab5a4a1b7f96c098ea37632502ba0bd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 10 Jul 2020 00:11:30 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-567746 --- package.json | 2 +- yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index e252695..5911e94 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "precommit": "npm run type-check && npm run lint && npm test" }, "dependencies": { - "lodash": "^4.17.5", + "lodash": "^4.17.16", "tslib": "^1.9.0" }, "devDependencies": { diff --git a/yarn.lock b/yarn.lock index 04fcaa7..e3f9f97 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2308,6 +2308,11 @@ lodash@^4.13.1, lodash@^4.14.0, lodash@^4.17.4, lodash@^4.17.5: version "4.17.5" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.5.tgz#99a92d65c0272debe8c96b6057bc8fbfa3bed511" +lodash@^4.17.16: + version "4.17.19" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b" + integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ== + log-driver@^1.2.5: version "1.2.7" resolved "https://registry.yarnpkg.com/log-driver/-/log-driver-1.2.7.tgz#63b95021f0702fedfa2c9bb0a24e7797d71871d8"