Skip to content

fix: update lodash version to 4.18.0#2319

Merged
the-hercules merged 2 commits intodevelopfrom
fix/security-issues-lodash
Apr 2, 2026
Merged

fix: update lodash version to 4.18.0#2319
the-hercules merged 2 commits intodevelopfrom
fix/security-issues-lodash

Conversation

@the-hercules
Copy link
Copy Markdown
Contributor

@the-hercules the-hercules commented Apr 2, 2026

Update lodash version to 4.18.0 in package-lock.json and add lodash override in package.json

Copilot AI review requested due to automatic review settings April 2, 2026 12:05
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the project’s lodash resolution to a newer version by enforcing it via npm overrides and reflecting the updated resolved version in the lockfile.

Changes:

  • Added an npm overrides entry for lodash in package.json.
  • Updated the resolved lodash package entry in package-lock.json (4.17.23 → 4.18.1).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
package.json Adds an override intended to force lodash to a specified version/range.
package-lock.json Pins the installed lodash package to 4.18.1 with updated resolved URL and integrity.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copy link
Copy Markdown
Collaborator

@NoumaanAhamed NoumaanAhamed left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@NoumaanAhamed NoumaanAhamed self-requested a review April 2, 2026 12:09
@the-hercules the-hercules merged commit 6f58a96 into develop Apr 2, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants