Skip to content

chore: update lodash and bump serialize-javascript to 7.0.5#60

Merged
corwinm merged 2 commits intomainfrom
fix/dependabot-45-serialize-javascript
Apr 3, 2026
Merged

chore: update lodash and bump serialize-javascript to 7.0.5#60
corwinm merged 2 commits intomainfrom
fix/dependabot-45-serialize-javascript

Conversation

@corwinm
Copy link
Copy Markdown
Owner

@corwinm corwinm commented Apr 3, 2026

Summary

  • update the transitive lodash resolution in pnpm-lock.yaml from 4.17.23 to 4.18.1
  • bump the mocha>serialize-javascript pnpm override from 7.0.3 to the patched 7.0.5
  • refresh the lockfile so the repo resolves the updated dependency set and fixes dependabot alert fix: Update tmp and @eslint/plugin-kit #45 (GHSA-qj8w-gfj5-8c6v)

@corwinm corwinm changed the title chore: bump serialize-javascript to 7.0.5 chore: update lodash and bump serialize-javascript to 7.0.5 Apr 3, 2026
@corwinm corwinm merged commit af26617 into main Apr 3, 2026
9 of 12 checks passed
@corwinm corwinm deleted the fix/dependabot-45-serialize-javascript branch April 3, 2026 22:55
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 4, 2026

🎉 This PR is included in version 0.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant