Merge pull request #3568 from weaveworks/update-lodash

fix CVE-2018-16487 (lodash vulnerability)
weaveworks · Feb 11, 2019 · 055608a · 055608a
2 parents 0c3f565 + febe9b6
commit 055608a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/client/package.json b/client/package.json
@@ -25,7 +25,7 @@
     "immutable": "3.8.2",
     "json-stable-stringify": "1.0.1",
     "lcp": "1.1.0",
-    "lodash": "4.17.10",
+    "lodash": "4.17.11",
     "materialize-css": "0.98.1",
     "moment": "2.21.0",
     "page": "1.7.1",

diff --git a/client/yarn.lock b/client/yarn.lock
@@ -5078,9 +5078,9 @@ lodash.uniq@^4.5.0:
   version "4.5.0"
   resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
 
-[email protected].10:
-  version "4.17.10"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7"
+[email protected].11:
+  version "4.17.11"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
 
 lodash@^3.10.0:
   version "3.10.1"