Skip to content

Fix lodash security vulnerability#123

Merged
Akrion merged 1 commit into
mainfrom
ia_fix_vulnerabilities2
Jun 2, 2026
Merged

Fix lodash security vulnerability#123
Akrion merged 1 commit into
mainfrom
ia_fix_vulnerabilities2

Conversation

@Akrion
Copy link
Copy Markdown
Member

@Akrion Akrion commented Jun 2, 2026

  • Fix lodash security vulnerability

@Akrion Akrion requested a review from Copilot June 2, 2026 17:40
@Akrion Akrion self-assigned this Jun 2, 2026
@Akrion Akrion requested review from meruyert93 and ttonelli June 2, 2026 17:41
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the project’s development dependency on lodash to address a reported security vulnerability by bumping the pinned version and refreshing the lockfile accordingly.

Changes:

  • Bump lodash devDependency from 4.17.23 to 4.18.1 in package.json.
  • Update package-lock.json entries (packages[""].devDependencies and node_modules/lodash resolved/integrity) to match the new version.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Pins lodash devDependency to 4.18.1 to remediate the vulnerability.
package-lock.json Updates lockfile metadata (version/resolved/integrity) for lodash to align with package.json.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@Akrion Akrion merged commit 702575e into main Jun 2, 2026
2 checks passed
@Akrion Akrion deleted the ia_fix_vulnerabilities2 branch June 2, 2026 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants