Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Upgrade Lodash #141

Merged
merged 1 commit into from
Feb 14, 2024
Merged

chore: Upgrade Lodash #141

merged 1 commit into from
Feb 14, 2024

Conversation

danharrin
Copy link
Contributor

lodash.get and lodash.set no longer receive updates, they are bundled into lodash.

This fixes a security issue and closes #137.

Maintainer: once this is released, please bump Spectaql which has this package as a dependency, it is currently vulnerable.

@danharrin danharrin mentioned this pull request Feb 12, 2024
@vavsab
Copy link

vavsab commented Feb 14, 2024

@newhouse Could you please merge this PR?

@newhouse
Copy link
Contributor

Working on this now for you @danharrin @vavsab

@newhouse newhouse merged commit 1d57583 into anvilco:main Feb 14, 2024
4 checks passed
@danharrin danharrin deleted the upgrade-lodash branch February 14, 2024 21:00
@danharrin
Copy link
Contributor Author

@newhouse please let me know if you want me to submit a new PR to bump Spectaql or if you will do this yourself

@newhouse
Copy link
Contributor

Published as 2.2.3

@newhouse please let me know if you want me to submit a new PR to bump Spectaql or if you will do this yourself

I'll do it myself...coming right up

@Orrison
Copy link

Orrison commented Feb 14, 2024

Thank you @newhouse!

@newhouse
Copy link
Contributor

Should be updated for you in spectaql in 2.3.1. Let me know if you're all good.

@danharrin @vavsab @Orrison

@danharrin
Copy link
Contributor Author

All good, thank you very much!

@vavsab
Copy link

vavsab commented Feb 14, 2024

Wow! This was fast🔥! Thank you ❤️

@joelicatajr
Copy link

Awesome, thank you so much @newhouse🙏!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Insecure lodash.set
5 participants