From b018fe0a5c79b1e41ad5d6112c3cedea3cba2abd Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Fri, 12 Mar 2021 10:00:59 +0000 Subject: [PATCH] [Security] Bump lodash from 4.17.15 to 4.17.21 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. **This update includes security fixes.** - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.21) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 955d119e2..718f24aa2 100644 --- a/package.json +++ b/package.json @@ -40,7 +40,7 @@ "copyfiles": "^2.1.1", "ethereumjs-util": "^6.1.0", "express": "^4.17.1", - "lodash": "^4.17.15", + "lodash": "^4.17.21", "ora": "^3.4.0", "run-s": "^0.0.0", "websocket": "^1.0.29" diff --git a/yarn.lock b/yarn.lock index 4623d888a..c142dad16 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4898,9 +4898,9 @@ lodash@4.17.14: version "4.17.14" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.14.tgz#9ce487ae66c96254fe20b599f21b6816028078ba" -lodash@^4.17.11, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.4: - version "4.17.15" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548" +lodash@^4.17.11, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.21, lodash@^4.17.4: + version "4.17.21" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c" log-symbols@2.2.0, log-symbols@^2.2.0: version "2.2.0"