From e48afe864d9821148083ab16e2db7ad01656e4a0 Mon Sep 17 00:00:00 2001 From: Alexander Zobnin Date: Tue, 28 Aug 2018 20:47:05 +0300 Subject: [PATCH] fix potential security vulnerability in lodash (update version) --- package.json | 8 ++++---- yarn.lock | 6 +----- 2 files changed, 5 insertions(+), 9 deletions(-) diff --git a/package.json b/package.json index 2cc2a8c..d55bd72 100644 --- a/package.json +++ b/package.json @@ -22,14 +22,13 @@ "url": "https://github.com/alexanderzobnin/grafana-zabbix/issues" }, "devDependencies": { - "babel": "~6.5.1", "babel-jest": "^21.2.0", "babel-plugin-transform-es2015-for-of": "^6.6.0", "babel-plugin-transform-es2015-modules-systemjs": "^6.5.0", "babel-preset-es2015": "^6.5.0", + "babel": "~6.5.1", "benchmark": "^2.1.4", "codecov": "^3.0.0", - "grunt": "~0.4.5", "grunt-babel": "~6.0.0", "grunt-benchmark": "^1.0.0", "grunt-cli": "~1.2.0", @@ -42,16 +41,17 @@ "grunt-jscs": "^2.8.0", "grunt-sass": "^1.1.0", "grunt-systemjs-builder": "^0.2.5", + "grunt": "~0.4.5", "jest": "^21.2.1", "jsdom": "~11.3.0", "jshint-stylish": "^2.1.0", "load-grunt-tasks": "~3.2.0", + "lodash": "~4.17.5", "moment": "~2.21.0", + "systemjs": "^0.20.19", "tether-drop": "^1.4.2" }, "dependencies": { - "lodash": "~4.0.0", - "systemjs": "^0.20.19" }, "homepage": "http://grafana-zabbix.org" } diff --git a/yarn.lock b/yarn.lock index aaecb83..da6c790 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3256,7 +3256,7 @@ lodash@^3.10.0, lodash@^3.5.0, lodash@^3.7.0, lodash@^3.9.3, lodash@~3.10.0: version "3.10.1" resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6" -lodash@^4.0.0, lodash@^4.0.1, lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.4, lodash@~4.17.10: +lodash@^4.0.0, lodash@^4.0.1, lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.4, lodash@~4.17.10, lodash@~4.17.5: version "4.17.10" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7" @@ -3272,10 +3272,6 @@ lodash@~2.4.1: version "2.4.2" resolved "https://registry.yarnpkg.com/lodash/-/lodash-2.4.2.tgz#fadd834b9683073da179b3eae6d9c0d15053f73e" -lodash@~4.0.0: - version "4.0.1" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.0.1.tgz#cd8c902c9e03f2e69ce3e0e456d505ab89eb98f4" - lodash@~4.6.1: version "4.6.1" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.6.1.tgz#df00c1164ad236b183cfc3887a5e8d38cc63cbbc"