From 3d48ea642212becf79e0d83f194508d905dea1ba Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 21 Jan 2021 22:16:46 +0000 Subject: [PATCH] fix: upgrade lodash from 4.17.11 to 4.17.20 Snyk has created this PR to upgrade lodash from 4.17.11 to 4.17.20. See this package in npm: See this project in Snyk: https://app.snyk.io/org/codefresh-org-1/project/3ee2690c-2010-4367-a963-5eadbfd47bba?utm_source=github&utm_medium=upgrade-pr --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 451f728..7540833 100644 --- a/package.json +++ b/package.json @@ -4,7 +4,7 @@ "main": "index.js", "license": "MIT", "dependencies": { - "lodash": "^4.17.11", + "lodash": "^4.17.20", "scp2": "^0.5.0", "ssh2-sftp-client": "^2.5.0" } diff --git a/yarn.lock b/yarn.lock index a7c3f9b..f60f637 100644 --- a/yarn.lock +++ b/yarn.lock @@ -94,10 +94,10 @@ isarray@0.0.1: resolved "https://registry.yarnpkg.com/isarray/-/isarray-0.0.1.tgz#8a18acfca9a8f4177e09abfc6038939b05d1eedf" integrity sha1-ihis/Kmo9Bd+Cav8YDiTmwXR7t8= -lodash@^4.17.11: - version "4.17.11" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d" - integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg== +lodash@^4.17.20: + version "4.17.20" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52" + integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA== lodash@~4.11.1: version "4.11.2"