From 1a14d1745df02758d89532d2571fa9fbde30ef98 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 17 Aug 2020 00:11:44 +0000 Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-590103 --- package.json | 2 +- yarn.lock | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index e252695..325f476 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "precommit": "npm run type-check && npm run lint && npm test" }, "dependencies": { - "lodash": "^4.17.5", + "lodash": "^4.17.20", "tslib": "^1.9.0" }, "devDependencies": { diff --git a/yarn.lock b/yarn.lock index 04fcaa7..cc757da 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2308,6 +2308,11 @@ lodash@^4.13.1, lodash@^4.14.0, lodash@^4.17.4, lodash@^4.17.5: version "4.17.5" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.5.tgz#99a92d65c0272debe8c96b6057bc8fbfa3bed511" +lodash@^4.17.20: + version "4.17.20" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52" + integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA== + log-driver@^1.2.5: version "1.2.7" resolved "https://registry.yarnpkg.com/log-driver/-/log-driver-1.2.7.tgz#63b95021f0702fedfa2c9bb0a24e7797d71871d8"