From 282e4df9f0b4987456825f2c00229309d8d76d3f Mon Sep 17 00:00:00 2001 From: Brian Lundin Date: Wed, 10 Jul 2019 23:09:22 -0500 Subject: [PATCH] fixing security vulnerability: https://github.com/lodash/lodash/pull/4336 --- package.json | 3 ++- yarn.lock | 5 +++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index 7cf9c177..25afc020 100644 --- a/package.json +++ b/package.json @@ -27,6 +27,7 @@ "gulp-spawn": "^0.4.4", "gulp-uglify": "^3.0.1", "gulp-watch": "^5.0.1", - "jshint": "^2.9.5" + "jshint": "^2.9.5", + "lodash": "^4.17.13" } } diff --git a/yarn.lock b/yarn.lock index 4770a055..e46f2a4e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2303,6 +2303,11 @@ lodash@^4.0.0, lodash@^4.12.0, lodash@^4.13.1, lodash@^4.17.10, lodash@~4.17.10: version "4.17.11" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d" +lodash@^4.17.13: + version "4.17.14" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.14.tgz#9ce487ae66c96254fe20b599f21b6816028078ba" + integrity sha512-mmKYbW3GLuJeX+iGP+Y7Gp1AiGHGbXHCOh/jZmrawMmsE7MS4znI3RL2FsjbqOyMayHInjOeykW7PEajUk1/xw== + loud-rejection@^1.0.0: version "1.6.0" resolved "https://registry.yarnpkg.com/loud-rejection/-/loud-rejection-1.6.0.tgz#5b46f80147edee578870f086d04821cf998e551f"