chore(deps): upgrade lodash to 4.18.1 in data-mapper-v2 by dependabot[bot] · Pull Request #8996 · Azure/LogicAppsUX

dependabot · 2026-04-02T08:56:32Z

Commit Type

feature - New functionality
fix - Bug fix
refactor - Code restructuring without behavior change
perf - Performance improvement
docs - Documentation update
test - Test-related changes
chore - Maintenance/tooling

Risk Level

Low - Minor changes, limited scope
Medium - Moderate changes, some user impact
High - Major changes, significant user/system impact

What & Why

This PR upgrades lodash from ^4.17.21 to ^4.18.1 for libs/data-mapper-v2 and updates the pnpm-lock.yaml accordingly.

Why:

Keep dependencies current and aligned with upstream fixes.
Pull in lodash 4.18.x improvements while preserving existing app behavior.

Impact of Change

Users: No direct user-facing changes expected.
Developers: Dependency graph is updated; lockfile now resolves lodash to 4.18.1.
System: Low-risk dependency maintenance update; no architecture or API contract changes.

Test Plan

Unit tests added/updated
E2E tests added/updated
Manual testing completed
Tested in: pnpm run build, pnpm run test:lib (passed)

Contributors

@dependabot

Screenshots/Videos

N/A

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-04-02T08:57:44Z

🤖 AI PR Validation Report

PR Review Results

Thank you for your submission! Here's detailed feedback on your PR title and body compliance:

✅ PR Title

Current: chore(deps): upgrade lodash to 4.18.1 in data-mapper-v2
Issue: None — title is clear and concise, indicates dependency bump and target package.
Recommendation: (Optional) You may prefer the conventional verb bump instead of upgrade to match common dependency-bump titles, e.g. chore(deps): bump lodash to 4.18.1 in libs/data-mapper-v2.

✅ Commit Type

Properly selected (chore).
Note: Only one commit type was selected which is correct for this change.

✅ Risk Level

The PR body marks this as Low risk and the repository has the risk:low label applied. Assessment: correct and consistent with the diff (small dependency bump limited to libs/data-mapper-v2 and lockfile updates).

✅ What & Why

Current: "This PR upgrades lodash from ^4.17.21 to ^4.18.1 for libs/data-mapper-v2 and updates the pnpm-lock.yaml accordingly." (body includes brief rationale)
Issue: None — the purpose is concise and adequate for a dependency update.
Recommendation: (Optional) If there are any known fixes in the lodash 4.18.x release that directly motivated this bump (security, bugfix), you can add a short line referencing those release notes to make the motivation explicit.

✅ Impact of Change

Impact is documented and aligns with the diff (package.json and pnpm-lock.yaml changes only).
Recommendation:
- Users: No direct user-facing changes expected (keep as-is).
- Developers: Dependency graph updated; keep note in release notes if you publish one.
- System: Low-risk; ensure CI runs across relevant build/test pipelines.

✅ Test Plan

Assessment: The PR indicates manual testing was completed and lists the commands used (pnpm run build, pnpm run test:lib). The change is a dependency bump with no code changes aside from lockfile and package.json, so the presented test plan is appropriate.
Recommendation: Ensure CI (full test suite) passes in addition to the local tests listed. If CI is blocked, address failures before merging.

✅ Contributors

The PR lists contributors (- @dependabot) which is fine. No missing acknowledgements that block the PR.

✅ Screenshots/Videos

Not applicable for this change (N/A).

Summary Table

Section	Status	Recommendation
Title	✅	Optional: use `bump` verb for consistency
Commit Type	✅	None
Risk Level	✅	None
What & Why	✅	Optional: reference relevant lodash release notes if applicable
Impact of Change	✅	None
Test Plan	✅	Ensure full CI runs/passes
Contributors	✅	None
Screenshots/Videos	✅	Not applicable

Final Notes & Recommended Actions

This PR passes the PR title/body checklist.
Advised risk level: Low (matches the submitter's label and the small scoped changes in the diff).
Please ensure the repository CI completes successfully (run the full pipeline) before merging.
Optional but recommended: remove the needs-pr-update label if no further PR body/title edits are required — that label suggests the PR still needs attention.

Thank you — this looks ready to merge once CI is green and any repository-specific gating (security scans, audits) are satisfied. If you'd like, I can re-check after CI completes.

Last updated: Fri, 03 Apr 2026 19:57:26 GMT

github-actions · 2026-04-02T09:20:49Z

📊 Coverage Check

No source files changed in this PR.

…ndabot/npm_and_yarn/lodash-4.18.1

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos Castro <ccastrotrejo@microsoft.com>

…dling, and file upload hooks (#9024) * fix(knowledge): Error handling and content changes for knowledge wizard and designer * chore(deps): bump lodash from 4.17.21 to 4.18.1 (#8996) Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos Castro <ccastrotrejo@microsoft.com> * fix(designer): Only populate deploymentModelProperties for MicrosoftFoundry (#9012) fixed deploymentModelProperties not updating properly issue * fix(DesignerV2): Fixed nested workflow clickthrough button (#9018) * Fixed child run issue in standard logic apps * Fixed duplicate IO requests * Fixed data import issue with io * Added clickthrough to context menu * Fixing issues found in knowledge hub creation * Fixing tests --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Priti Sambandam <psamband@microsoft.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos Castro <ccastrotrejo@microsoft.com> Co-authored-by: Elaina Lee <144840522+Elaina-Lee@users.noreply.github.com> Co-authored-by: Riley Evans <rllyy97@gmail.com>

…, and file upload hooks (#9024) (#9058) refactor(knowledge): add toaster notifications, centralized error handling, and file upload hooks (#9024) * fix(knowledge): Error handling and content changes for knowledge wizard and designer * chore(deps): bump lodash from 4.17.21 to 4.18.1 (#8996) Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: direct:production ... * fix(designer): Only populate deploymentModelProperties for MicrosoftFoundry (#9012) fixed deploymentModelProperties not updating properly issue * fix(DesignerV2): Fixed nested workflow clickthrough button (#9018) * Fixed child run issue in standard logic apps * Fixed duplicate IO requests * Fixed data import issue with io * Added clickthrough to context menu * Fixing issues found in knowledge hub creation * Fixing tests --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Priti Sambandam <psamband@microsoft.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carlos Castro <ccastrotrejo@microsoft.com> Co-authored-by: Elaina Lee <144840522+Elaina-Lee@users.noreply.github.com> Co-authored-by: Riley Evans <rllyy97@gmail.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 2, 2026

github-actions bot added the needs-pr-update label Apr 2, 2026

takyyon approved these changes Apr 2, 2026

View reviewed changes

This was referenced Apr 2, 2026

[repo-status] Daily Repo Status — April 2, 2026 #8998

Closed

[repo-status] Daily Repo Status — April 3, 2026 #9007

Closed

Merge branch 'main' of https://github.com/Azure/LogicAppsUX into depe…

3d58ffc

…ndabot/npm_and_yarn/lodash-4.18.1

ccastrotrejo added the risk:low Low risk change with minimal impact label Apr 3, 2026

ccastrotrejo enabled auto-merge (squash) April 3, 2026 19:55

ccastrotrejo changed the title ~~chore(deps): bump lodash from 4.17.21 to 4.18.1~~ chore(deps): upgrade lodash to 4.18.1 in data-mapper-v2 Apr 3, 2026

github-actions bot added pr-validated and removed needs-pr-update labels Apr 3, 2026

ccastrotrejo merged commit a371988 into main Apr 3, 2026
16 of 18 checks passed

ccastrotrejo deleted the dependabot/npm_and_yarn/lodash-4.18.1 branch April 3, 2026 20:11

preetriti1 mentioned this pull request Apr 14, 2026

fix(knowledge): add toaster notifications, centralized error handling, and file upload hooks (#9024) #9058

Merged

14 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): upgrade lodash to 4.18.1 in data-mapper-v2#8996

chore(deps): upgrade lodash to 4.18.1 in data-mapper-v2#8996
ccastrotrejo merged 2 commits intomainfrom
dependabot/npm_and_yarn/lodash-4.18.1

dependabot bot commented on behalf of github Apr 2, 2026 •

edited by ccastrotrejo

Loading

Uh oh!

github-actions bot commented Apr 2, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Apr 2, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Apr 2, 2026 • edited by ccastrotrejo Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Commit Type

Risk Level

What & Why

Impact of Change

Test Plan

Contributors

Screenshots/Videos

Uh oh!

github-actions bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 AI PR Validation Report

PR Review Results

Thank you for your submission! Here's detailed feedback on your PR title and body compliance:

✅ PR Title

✅ Commit Type

✅ Risk Level

✅ What & Why

✅ Impact of Change

✅ Test Plan

✅ Contributors

✅ Screenshots/Videos

Summary Table

Uh oh!

github-actions bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📊 Coverage Check

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Apr 2, 2026 •

edited by ccastrotrejo

Loading

github-actions bot commented Apr 2, 2026 •

edited

Loading

github-actions bot commented Apr 2, 2026 •

edited

Loading