From ad850fce04302b8fead29f9060bd148747bd7c78 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 16 Jun 2026 13:20:43 +0000 Subject: [PATCH] Bump lodash from 4.17.21 to 4.18.1 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- comment-snyk-report/package.json | 2 +- package-lock.json | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/comment-snyk-report/package.json b/comment-snyk-report/package.json index 39ff6cf..bfec8f2 100644 --- a/comment-snyk-report/package.json +++ b/comment-snyk-report/package.json @@ -10,7 +10,7 @@ "dependencies": { "@actions/core": "1.10.1", "@actions/github": "6.0.0", - "lodash": "4.17.21" + "lodash": "4.18.1" }, "devDependencies": { "@types/lodash": "4.14.202", diff --git a/package-lock.json b/package-lock.json index 628522f..2bd380e 100644 --- a/package-lock.json +++ b/package-lock.json @@ -66,7 +66,7 @@ "dependencies": { "@actions/core": "1.10.1", "@actions/github": "6.0.0", - "lodash": "4.17.21" + "lodash": "^4.18.1" }, "devDependencies": { "@types/lodash": "4.14.202", @@ -871,9 +871,9 @@ } }, "node_modules/lodash": { - "version": "4.17.21", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", - "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==", + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==", "license": "MIT" }, "node_modules/macos-release": {