fix: lodash vulnerability

bamlab · Feb 11, 2019 · ff6a3f0 · ff6a3f0
1 parent f966b94
commit ff6a3f0
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 6 deletions.
diff --git a/package.json b/package.json
@@ -23,8 +23,8 @@
   ],
   "dependencies": {
     "@bam.tech/react-native-modalbox": "^1.4.2",
+    "lodash": "^4.17.11",
     "react-native-root-siblings": "3.1.7",
-    "lodash": "4.17.5",
     "recompose": "^0.26.0"
   },
   "author": "Almouro <contact@almouro.com> (http://alexandremoureaux.com/)",
@@ -38,7 +38,6 @@
     "@types/react": "^16.3.8",
     "babel-core": "6.26.0",
     "babel-jest": "23.6.0",
-    "metro-react-native-babel-preset": "0.50.0",
     "babel-preset-react-native": "4.0.0",
     "commitizen": "^2.9.6",
     "coveralls": "^3.0.0",
@@ -50,6 +49,7 @@
     "formik": "^1.0.2",
     "husky": "^0.14.3",
     "jest": "23.6.0",
+    "metro-react-native-babel-preset": "0.50.0",
     "prettier": "^1.14.0",
     "react": "16.2.0",
     "react-dom": "16.2.1",

diff --git a/yarn.lock b/yarn.lock
@@ -6519,18 +6519,23 @@ lodash@4.17.2:
   version "4.17.2"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.2.tgz#34a3055babe04ce42467b607d700072c7ff6bf42"
 
-lodash@4.17.5, lodash@^4.13.1, lodash@^4.14.0, lodash@^4.15.0, lodash@^4.16.6, lodash@^4.17.4, lodash@^4.2.1, lodash@^4.3.0, lodash@^4.6.1:
-  version "4.17.5"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.5.tgz#99a92d65c0272debe8c96b6057bc8fbfa3bed511"
-
 lodash@^3.5.0:
   version "3.10.1"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6"
 
+lodash@^4.13.1, lodash@^4.14.0, lodash@^4.15.0, lodash@^4.16.6, lodash@^4.17.4, lodash@^4.2.1, lodash@^4.3.0, lodash@^4.6.1:
+  version "4.17.5"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.5.tgz#99a92d65c0272debe8c96b6057bc8fbfa3bed511"
+
 lodash@^4.17.10, lodash@^4.17.5, lodash@^4.2.0:
   version "4.17.10"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7"
 
+lodash@^4.17.11:
+  version "4.17.11"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
+  integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==
+
 log-driver@^1.2.5:
   version "1.2.7"
   resolved "https://registry.yarnpkg.com/log-driver/-/log-driver-1.2.7.tgz#63b95021f0702fedfa2c9bb0a24e7797d71871d8"