Vulnerable dependecy : lodash

[thib-rdr]

Hi,

I use bullmq in a project built by a CI server, automatically running yarn audit on each build.

Today, it started failing because of a vulnerable version of lodash, classified as high :

yarn audit --level=high --groups=dependencies

Here's the result, preventing the build :

Would it be possible to upgrade lodash in bullmq, it's been fixed for a while now : https://snyk.io/test/npm/lodash/4.17.21

Thanks

[github-actions]

🎉 This issue has been resolved in version 1.24.5 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀

[thib-rdr]

Awesome, thanks.