From 4b6a37f6e62e8a3b099e0270f2122d046eef3e18 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 9 May 2021 10:02:42 +0000 Subject: [PATCH] Bump lodash from 4.17.4 to 4.17.21 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.4 to 4.17.21. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.4...4.17.21) Signed-off-by: dependabot[bot] --- package.json | 2 +- yarn.lock | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 427b76f..05b2e11 100644 --- a/package.json +++ b/package.json @@ -25,7 +25,7 @@ "cors": "^2.7.1", "express": "^4.14.0", "jsonwebtoken": "^7.1.6", - "lodash": "^4.13.1", + "lodash": "^4.17.21", "mkdirp": "^0.5.1", "mongoose": "^4.5.4", "mongoose-unique-validator": "^1.0.2", diff --git a/yarn.lock b/yarn.lock index 1122e37..8f5ceaf 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1655,9 +1655,9 @@ lodash.restparam@^3.0.0: version "3.6.1" resolved "http://registry.npm.taobao.org/lodash.restparam/download/lodash.restparam-3.6.1.tgz#936a4e309ef330a7645ed4145986c85ae5b20805" -lodash@^4.0.0, lodash@^4.13.1, lodash@^4.14.0, lodash@^4.3.0: - version "4.17.4" - resolved "http://registry.npm.taobao.org/lodash/download/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae" +lodash@^4.0.0, lodash@^4.14.0, lodash@^4.17.21, lodash@^4.3.0: + version "4.17.21" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c" lowercase-keys@^1.0.0: version "1.0.0"