From 9331bfd73c7d015e291b36037ce86cd5a3e21a97 Mon Sep 17 00:00:00 2001 From: Jason Mobarak Date: Wed, 6 Mar 2019 13:42:21 -0800 Subject: [PATCH 1/2] Patch lodash to resolve GH security warning --- package-lock.json | 10 +++++++++- package.json | 2 +- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/package-lock.json b/package-lock.json index db2ce90e45..9e8576d574 100644 --- a/package-lock.json +++ b/package-lock.json @@ -737,8 +737,16 @@ "integrity": "sha1-CfPeMckWQl1JjMLuVloOvzwqVik=", "dev": true, "requires": { - "lodash": "4.17.10", + "lodash": "4.17.11", "platform": "1.3.5" + }, + "dependencies": { + "lodash": { + "version": "4.17.11", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz", + "integrity": "sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==", + "dev": true + } } }, "big.js": { diff --git a/package.json b/package.json index 170500c664..6b12749c60 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ }, "devDependencies": { "benchmark": "^2.1.4", - "lodash": "^4.17.10", + "lodash": "^4.17.11", "mocha": "^5.2.0", "request": "^2.88.0", "serialport": "^6.2.0", From 634f992a131482752a9c057770c614cf76090673 Mon Sep 17 00:00:00 2001 From: Jason Mobarak Date: Wed, 6 Mar 2019 13:47:47 -0800 Subject: [PATCH 2/2] Update package-lock.json --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9e8576d574..f21c6fc4f1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3129,9 +3129,9 @@ } }, "lodash": { - "version": "4.17.10", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.10.tgz", - "integrity": "sha512-UejweD1pDoXu+AD825lWwp4ZGtSwgnpZxb3JDViD7StjQz+Nb/6l093lx4OQ0foGWNRoc19mWy7BzL+UAK2iVg==", + "version": "4.17.11", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz", + "integrity": "sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==", "dev": true }, "lodash.debounce": {