chore(deps): update dependency lerna to v9 #19

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

The @lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

8.2.4 (2025-07-27)

Bug Fixes

remove all remaining lodash usage (#4207) (8211512)

8.2.3 (2025-06-29)

Bug Fixes

use internal fork of unmaintained strong-log-transformer (#4195) (7115485)

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

8.2.1 (2025-03-03)

Note: Version bump only for package lerna

`v8.2.4`

Compare Source

Bug Fixes

publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing
A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

The @lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

8.2.4 (2025-07-27)

Bug Fixes

remove all remaining lodash usage (#4207) (8211512)

8.2.3 (2025-06-29)

Bug Fixes

use internal fork of unmaintained strong-log-transformer (#4195) (7115485)

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

8.2.1 (2025-03-03)

Note: Version bump only for package lerna

`v8.2.3`

Compare Source

Bug Fixes

publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing
A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

The @lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

8.2.4 (2025-07-27)

Bug Fixes

remove all remaining lodash usage (#4207) (8211512)

8.2.3 (2025-06-29)

Bug Fixes

use internal fork of unmaintained strong-log-transformer (#4195) (7115485)

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

8.2.1 (2025-03-03)

Note: Version bump only for package lerna

`v8.2.2`

Compare Source

Bug Fixes

publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing
A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

The @lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

8.2.4 (2025-07-27)

Bug Fixes

remove all remaining lodash usage (#4207) (8211512)

8.2.3 (2025-06-29)

Bug Fixes

use internal fork of unmaintained strong-log-transformer (#4195) (7115485)

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

8.2.1 (2025-03-03)

Note: Version bump only for package lerna

`v8.2.1`

Compare Source

Bug Fixes

publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing
A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

The @lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

8.2.4 (2025-07-27)

Bug Fixes

remove all remaining lodash usage (#4207) (8211512)

8.2.3 (2025-06-29)

Bug Fixes

use internal fork of unmaintained strong-log-transformer (#4195) (7115485)

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

8.2.1 (2025-03-03)

Note: Version bump only for package lerna

`v8.2.0`

Compare Source

Bug Fixes

publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing
A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

The @lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

8.2.4 (2025-07-27)

Bug Fixes

remove all remaining lodash usage (#4207) (8211512)

8.2.3 (2025-06-29)

Bug Fixes

use internal fork of unmaintained strong-log-transformer (#4195) (7115485)

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

8.2.1 (2025-03-03)

Note: Version bump only for package lerna

`v8.1.9`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

8.1.3 (2024-05-13)

Bug Fixes

deps: bump tar from 6.1.11 to 6.2.1 (#3990) (3fe0cf0)
update to nx 19 (#4003) (03f476b)

8.1.2 (2024-02-05)

Note: Version bump only for package lerna

8.1.1 (2024-02-05)

Note: Version bump only for package lerna

`v8.1.8`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

8.1.3 (2024-05-13)

Bug Fixes

deps: bump tar from 6.1.11 to 6.2.1 (#3990) (3fe0cf0)
update to nx 19 (#4003) (03f476b)

8.1.2 (2024-02-05)

Note: Version bump only for package lerna

8.1.1 (2024-02-05)

Note: Version bump only for package lerna

`v8.1.7`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

8.1.3 (2024-05-13)

Bug Fixes

deps: bump tar from 6.1.11 to 6.2.1 (#3990) (3fe0cf0)
update to nx 19 (#4003) (03f476b)

8.1.2 (2024-02-05)

Note: Version bump only for package lerna

8.1.1 (2024-02-05)

Note: Version bump only for package lerna

`v8.1.6`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

8.1.3 (2024-05-13)

Bug Fixes

deps: bump tar from 6.1.11 to 6.2.1 (#3990) (3fe0cf0)
update to nx 19 (#4003) (03f476b)

8.1.2 (2024-02-05)

Note: Version bump only for package lerna

8.1.1 (2024-02-05)

Note: Version bump only for package lerna

`v8.1.5`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

8.1.3 (2024-05-13)

Bug Fixes

deps: bump tar from 6.1.11 to 6.2.1 (#3990) (3fe0cf0)
update to nx 19 (#4003) (03f476b)

8.1.2 (2024-02-05)

Note: Version bump only for package lerna

8.1.1 (2024-02-05)

Note: Version bump only for package lerna

`v8.1.4`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

8.1.3 (2024-05-13)

Bug Fixes

deps: bump tar from 6.1.11 to 6.2.1 (#3990) (3fe0cf0)
update to nx 19 (#4003) (03f476b)

8.1.2 (2024-02-05)

Note: Version bump only for package lerna

8.1.1 (2024-02-05)

Note: Version bump only for package lerna

`v8.1.3`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

8.1.3 (2024-05-13)

Bug Fixes

deps: bump tar from 6.1.11 to 6.2.1 (#3990) (3fe0cf0)
update to nx 19 (#4003) (03f476b)

8.1.2 (2024-02-05)

Note: Version bump only for package lerna

8.1.1 (2024-02-05)

Note: Version bump only for package lerna

`v8.1.2`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

8.1.3 (2024-05-13)

Bug Fixes

deps: bump tar from 6.1.11 to 6.2.1 (#3990) (3fe0cf0)
update to nx 19 (#4003) (03f476b)

8.1.2 (2024-02-05)

Note: Version bump only for package lerna

8.1.1 (2024-02-05)

Note: Version bump only for package lerna

`v8.1.1`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8)

8.1.4 (2024-06-09)

Note: Version bump only for package lerna

8.1.3 (2024-05-13)

Bug Fixes

deps: bump tar from 6.1.11 to 6.2.1 (#3990) (3fe0cf0)
update to nx 19 (#4003) (03f476b)

8.1.2 (2024-02-05)

Note: Version bump only for package lerna

8.1.1 (2024-02-05)

Note: Version bump only for package lerna

`v8.1.0`

Compare Source

Bug Fixes

drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

allow custom working dir for detectProjects (#4148) (08d1d0d)

8.1.9 (2024-10-31)

Bug Fixes

add extends property in schema (#4075) (28c8ef2)
core: avoid reading empty .config.json, upgrade cosmiconfig@v9.0.0 (#4062) (960bdd9)
update nx support to latest v20 (#4103) (cb37f19)

8.1.8 (2024-08-05)

Bug Fixes

publish: upgrade @npmcli/arborist to 7.5.4 (#4058) (89de0eb)

8.1.7 (2024-07-21)

Bug Fixes

set explicit strip-ansi dependency (#4045) (6e5cfbc)

8.1.6 (2024-07-05)

Bug Fixes

set explicit string-width dependency (#4038) (5f3603a)

8.1.5 (2024-06-24)

Bug Fixes

update npm utility dependencies and related packages (#4033) (bd1c2d8

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2025-08-31T10:04:33Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `lerna` is 98.0% likely obfuscated Confidence: 0.98 Location: Package overview From: package.json → `npm/lerna@9.0.4` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/lerna@9.0.4`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

socket-security · 2026-01-08T18:48:06Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	lodash@4.17.21 ⏵ 4.17.23	^-5	⁺²	⁺¹
	lerna@3.22.1 ⏵ 9.0.4	^-10		⁺¹⁴	⁺⁶

View full report

renovate bot force-pushed the renovate/major-lerna-monorepo branch from b6a3fbe to bdfe426 Compare June 18, 2022 19:30

renovate bot changed the title ~~chore(deps): update dependency lerna to v4~~ chore(deps): update dependency lerna to v5 Jun 18, 2022

renovate bot force-pushed the renovate/major-lerna-monorepo branch from bdfe426 to 41524f2 Compare November 20, 2022 20:47

renovate bot changed the title ~~chore(deps): update dependency lerna to v5~~ chore(deps): update dependency lerna to v6 Nov 20, 2022

renovate bot changed the title ~~chore(deps): update dependency lerna to v6~~ chore(deps): update dependency lerna to v7 Jun 8, 2023

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 41524f2 to 71ed0d7 Compare June 8, 2023 14:07

renovate bot changed the title ~~chore(deps): update dependency lerna to v7~~ chore(deps): update dependency lerna to v8 Nov 23, 2023

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 71ed0d7 to b530dd1 Compare November 23, 2023 17:18

renovate bot force-pushed the renovate/major-lerna-monorepo branch 2 times, most recently from ef7b38f to 2272298 Compare August 13, 2025 15:54

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 2272298 to 55a7937 Compare August 19, 2025 17:13

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 55a7937 to 638e28b Compare August 31, 2025 10:04

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 638e28b to 7589afc Compare September 15, 2025 21:30

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 7589afc to 6245e2f Compare September 23, 2025 11:07

renovate bot changed the title ~~chore(deps): update dependency lerna to v8~~ chore(deps): update dependency lerna to v9 Sep 23, 2025

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 6245e2f to 9d5f1eb Compare September 25, 2025 20:09

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 9d5f1eb to 6baac00 Compare October 22, 2025 01:44

renovate bot force-pushed the renovate/major-lerna-monorepo branch 2 times, most recently from 7eb6751 to 49a61bf Compare November 14, 2025 12:41

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 49a61bf to f91f436 Compare November 19, 2025 00:43

renovate bot force-pushed the renovate/major-lerna-monorepo branch 2 times, most recently from 2d62ac6 to abaeaa7 Compare December 3, 2025 19:39

renovate bot force-pushed the renovate/major-lerna-monorepo branch from abaeaa7 to bed27c5 Compare December 31, 2025 17:50

renovate bot force-pushed the renovate/major-lerna-monorepo branch from bed27c5 to c5cf62c Compare January 8, 2026 18:47

renovate bot force-pushed the renovate/major-lerna-monorepo branch 2 times, most recently from d6ccc07 to 6f4ed3c Compare January 23, 2026 20:32

renovate bot force-pushed the renovate/major-lerna-monorepo branch from 6f4ed3c to ddbdc61 Compare February 2, 2026 17:49

chore(deps): update dependency lerna to v9

79cc60a

renovate bot force-pushed the renovate/major-lerna-monorepo branch from ddbdc61 to 79cc60a Compare February 11, 2026 00:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency lerna to v9 #19

chore(deps): update dependency lerna to v9 #19

Uh oh!

renovate bot commented Apr 11, 2022 •

edited

Loading

Uh oh!

socket-security bot commented Aug 31, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Jan 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chore(deps): update dependency lerna to v9 #19

Are you sure you want to change the base?

chore(deps): update dependency lerna to v9 #19

Uh oh!

Conversation

renovate bot commented Apr 11, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

8.2.4 (2025-07-27)

Bug Fixes

8.2.3 (2025-06-29)

Bug Fixes

8.2.2 (2025-04-10)

8.2.1 (2025-03-03)

Bug Fixes

Features

BREAKING CHANGES

8.2.4 (2025-07-27)

Bug Fixes

8.2.3 (2025-06-29)

Bug Fixes

8.2.2 (2025-04-10)

8.2.1 (2025-03-03)

Bug Fixes

Features

BREAKING CHANGES

8.2.4 (2025-07-27)

Bug Fixes

8.2.3 (2025-06-29)

Bug Fixes

8.2.2 (2025-04-10)

8.2.1 (2025-03-03)

Bug Fixes

Features

BREAKING CHANGES

8.2.4 (2025-07-27)

Bug Fixes

8.2.3 (2025-06-29)

Bug Fixes

8.2.2 (2025-04-10)

8.2.1 (2025-03-03)

Bug Fixes

Features

BREAKING CHANGES

8.2.4 (2025-07-27)

Bug Fixes

8.2.3 (2025-06-29)

Bug Fixes

8.2.2 (2025-04-10)

8.2.1 (2025-03-03)

Bug Fixes

Features

BREAKING CHANGES

8.2.4 (2025-07-27)

Bug Fixes

8.2.3 (2025-06-29)

Bug Fixes

8.2.2 (2025-04-10)

8.2.1 (2025-03-03)

Bug Fixes

Features

8.1.9 (2024-10-31)

Bug Fixes

8.1.8 (2024-08-05)

Bug Fixes

8.1.7 (2024-07-21)

Bug Fixes

8.1.6 (2024-07-05)

Bug Fixes

8.1.5 (2024-06-24)

Bug Fixes

8.1.4 (2024-06-09)

8.1.3 (2024-05-13)

Bug Fixes

8.1.2 (2024-02-05)

renovate bot commented Apr 11, 2022 •

edited

Loading