From 76f9452b8703094931f4a8b3e0af08e9aca682a6 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Wed, 10 Jul 2019 22:09:55 +0000 Subject: [PATCH] [Security] Bump lodash from 4.17.11 to 4.17.13 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.13. **This update includes security fixes.** - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.11...4.17.13) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 582206b..27b1a30 100644 --- a/package.json +++ b/package.json @@ -25,7 +25,7 @@ "express": "^4.16.3", "geojson-validation": "^0.2.1", "hot-formula-parser": "3.0.1", - "lodash": "^4.17.11", + "lodash": "^4.17.13", "mathjs": "6.0.2", "mockgoose": "^7.3.5", "mongoose": "^5.2.4", diff --git a/yarn.lock b/yarn.lock index c1fae5a..b46a71e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2115,9 +2115,9 @@ lodash.get@4.4.2: version "4.4.2" resolved "https://registry.yarnpkg.com/lodash.get/-/lodash.get-4.4.2.tgz#2d177f652fa31e939b4438d5341499dfa3825e99" -lodash@^4.13.1, lodash@^4.14.0, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.3.0, lodash@~4.17.0: - version "4.17.11" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d" +lodash@^4.13.1, lodash@^4.14.0, lodash@^4.17.10, lodash@^4.17.13, lodash@^4.17.4, lodash@^4.2.0, lodash@^4.3.0, lodash@~4.17.0: + version "4.17.13" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.13.tgz#0bdc3a6adc873d2f4e0c4bac285df91b64fc7b93" loose-envify@^1.0.0: version "1.4.0"