Merge pull request #568 from telefonicaid/task/upgrade_undescore_dep

Upgrade underscore dep (1.9.1 to 1.12.1)
telefonicaid · Jun 11, 2021 · aa5741b · aa5741b
2 parents 4e6c2f1 + 5aa0888
commit aa5741b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGES_NEXT_RELEASE b/CHANGES_NEXT_RELEASE
@@ -1,3 +1,4 @@
+- Fix: upgrade underscore dep from 1.9.1 to 1.12.1 due to vulnerability
 - (Only tests) Fix: ensure service of groups, device and commands is stored in mongo in lowercase (iota-node-lib#1023)
 - Add MQTT options `clean` and `clientId` (env vars IOTA_MQTT_CLEAN and IOTA_MQTT_CLIENT_ID) (#414, #466, #497)
 - Fix: missing content-type: application/json header in the request sent to device command endpoint (HTTP transport)

diff --git a/package.json b/package.json
@@ -67,7 +67,7 @@
     "mqtt": "3.0.0",
     "request": "2.88.0",
     "sinon": "~6.1.0",
-    "underscore": "1.9.1"
+    "underscore": "1.12.1"
   },
   "husky": {
     "hooks": {