From 4a3f8845005996a48f952bdb3fb194b3a2bad730 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 23 Feb 2021 07:50:48 +0000 Subject: [PATCH] fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LODASH-1018905 - https://snyk.io/vuln/SNYK-JS-LODASH-1040724 --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) mode change 100755 => 100644 package.json diff --git a/package-lock.json b/package-lock.json index 21be0f5c..e51e21f0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,6 +1,6 @@ { "name": "mopidy-iris", - "version": "3.55.5", + "version": "3.56.1", "lockfileVersion": 1, "requires": true, "dependencies": { @@ -11377,9 +11377,9 @@ } }, "lodash": { - "version": "4.17.20", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", - "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==" + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==" }, "lodash.camelcase": { "version": "4.3.0", diff --git a/package.json b/package.json old mode 100755 new mode 100644 index 3c6a463c..d120f751 --- a/package.json +++ b/package.json @@ -15,7 +15,7 @@ "jquery": "^3.5.1", "libflacjs": "^5.4.0", "localforage": "^1.9.0", - "lodash": "^4.17.20", + "lodash": "^4.17.21", "logrocket": "^1.0.14", "mopidy": "^0.5", "react": "^16.14.0",