This is an automated email from the ASF dual-hosted git repository.
jxue pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/helix.git
The following commit(s) were added to refs/heads/master by this push:
new 131628141 Bump lodash from 4.17.21 to 4.17.23 in /helix-front
131628141 is described below
commit 131628141e5c55f9ee9526c4b094ac8d7419e328
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Wed Jan 21 23:08:18 2026 +0000
Bump lodash from 4.17.21 to 4.17.23 in /helix-front
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.17.23
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]>
---
helix-front/package.json | 2 +-
helix-front/yarn.lock | 8 ++++----
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/helix-front/package.json b/helix-front/package.json
index be99b3864..0d7be978c 100644
--- a/helix-front/package.json
+++ b/helix-front/package.json
@@ -96,7 +96,7 @@
"express-session": "^1.15.6",
"keycharm": "^0.3.0",
"ldapjs": "^1.0.2",
- "lodash": "^4.17.12",
+ "lodash": "^4.17.23",
"moment": "^2.29.2",
"morgan": "^1.8.2",
"ng2-ace-editor": "^0.3.9",
diff --git a/helix-front/yarn.lock b/helix-front/yarn.lock
index a6b8063c9..37e8920f9 100644
--- a/helix-front/yarn.lock
+++ b/helix-front/yarn.lock
@@ -11184,10 +11184,10 @@ [email protected]:
resolved
"https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
integrity
sha512-xfBaXQd9ryd9dlSDvnvI0lvxfLJlYAZzXomUYzLKtUeOQvOP5piqAWuGtrhWeqaXK9hhoM/iyJc5AV+XfsX3HQ==
-lodash@^4.17.12, lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.19,
lodash@^4.17.20, lodash@^4.17.21, lodash@^4.5.1, lodash@^4.7.0:
- version "4.17.21"
- resolved
"https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
- integrity
sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
+lodash@^4.17.14, lodash@^4.17.15, lodash@^4.17.19, lodash@^4.17.20,
lodash@^4.17.21, lodash@^4.17.23, lodash@^4.5.1, lodash@^4.7.0:
+ version "4.17.23"
+ resolved
"https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
+ integrity
sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==
log-symbols@^4.0.0, log-symbols@^4.1.0:
version "4.1.0"