From e1caf974b73b540f87dc6708737d663f0fd29b07 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 9 May 2021 09:45:59 +0000 Subject: [PATCH] Bump lodash from 3.10.1 to 4.17.21 Bumps [lodash](https://github.com/lodash/lodash) from 3.10.1 to 4.17.21. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/3.10.1...4.17.21) Signed-off-by: dependabot[bot] --- package.json | 2 +- yarn.lock | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 113673b..993fd3f 100644 --- a/package.json +++ b/package.json @@ -20,7 +20,7 @@ "hexo-renderer-marked": "^0.2.5", "hexo-renderer-stylus": "^0.3.0", "hexo-server": "^0.1.2", - "lodash": "^3.10.1", + "lodash": "^4.17.21", "lunr": "^0.6.0" }, "devDependencies": { diff --git a/yarn.lock b/yarn.lock index cd275fc..cd0cebc 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3754,9 +3754,9 @@ lodash@^3.10.1, lodash@^3.2.0: version "3.10.1" resolved "https://registry.yarnpkg.com/lodash/-/lodash-3.10.1.tgz#5bf45e8e49ba4189e17d482789dfd15bd140b7b6" -lodash@^4.0.0, lodash@^4.1.0, lodash@^4.13.1, lodash@^4.2.1: - version "4.17.4" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae" +lodash@^4.0.0, lodash@^4.1.0, lodash@^4.13.1, lodash@^4.17.21, lodash@^4.2.1: + version "4.17.21" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c" lodash@~1.0.1: version "1.0.2"