From 3c14c9cd8cc42fa7e2e64aeec6a80cc81bee8054 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Maur=C3=ADcio=20Meneghini=20Fauth?= Date: Fri, 12 Jul 2019 00:36:08 -0300 Subject: [PATCH] Force use of lodash version >= 4.17.13 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit To address security vulnerability Signed-off-by: Maurício Meneghini Fauth --- package.json | 3 +++ yarn.lock | 8 ++++---- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index ba97604127..b147d51254 100644 --- a/package.json +++ b/package.json @@ -31,6 +31,9 @@ "stylelint-config-standard": "^18.3.0", "stylelint-scss": "^3.9.1" }, + "resolutions": { + "lodash": "^4.17.13" + }, "scripts": { "postinstall": "yarn run --silent css-compile --quiet --style=compressed", "css-compile": "sass themes/pmahomme/scss:themes/pmahomme/css themes/original/scss:themes/original/css themes/metro/scss:themes/metro/css", diff --git a/yarn.lock b/yarn.lock index fe2c63b8ee..2d8d89c548 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1662,10 +1662,10 @@ locate-path@^2.0.0: p-locate "^2.0.0" path-exists "^3.0.0" -lodash@^4.17.11: - version "4.17.11" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d" - integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg== +lodash@^4.17.11, lodash@^4.17.13: + version "4.17.14" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.14.tgz#9ce487ae66c96254fe20b599f21b6816028078ba" + integrity sha512-mmKYbW3GLuJeX+iGP+Y7Gp1AiGHGbXHCOh/jZmrawMmsE7MS4znI3RL2FsjbqOyMayHInjOeykW7PEajUk1/xw== log-symbols@^2.2.0: version "2.2.0"