paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 36 Packages Projects Releases Wiki Activity

Merge pull request #7221 from backstage/timbonicus/lodash

Browse Source 
security: bump lodash to 4.17.21
This commit is contained in:
Fredrik Adelöw
2021-09-17 10:12:33 +02:00
committed by GitHub
parent 75fbb44219 552a23507f
commit 2271ead6a7
16 changed files with 34 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.changeset/spicy-yaks-notice.md
+19
View File
@@ -0,0 +1,19 @@
---
'@backstage/backend-common': patch
'@backstage/catalog-model': patch
'@backstage/cli': patch
'@backstage/config': patch
'@backstage/core-components': patch
'@backstage/plugin-catalog-backend': patch
'@backstage/plugin-catalog-backend-module-ldap': patch
'@backstage/plugin-catalog-backend-module-msgraph': patch
'@backstage/plugin-catalog-react': patch
'@backstage/plugin-circleci': patch
'@backstage/plugin-kafka-backend': patch
'@backstage/plugin-kubernetes-backend': patch
'@backstage/plugin-rollbar': patch
'@backstage/plugin-rollbar-backend': patch
'@backstage/plugin-search-backend-module-pg': patch
---
Bump `lodash` to remediate `SNYK-JS-LODASH-590103` security vulnerability
packages/backend-common/package.json
+1 -1
View File
@@ -55,7 +55,7 @@
"keyv": "^4.0.3",
"keyv-memcache": "^1.2.5",
"knex": "^0.95.1",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"logform": "^2.1.1",
"minimatch": "^3.0.4",
"minimist": "^1.2.5",
packages/catalog-model/package.json
+1 -1
View File
@@ -36,7 +36,7 @@
"@types/yup": "^0.29.8",
"ajv": "^7.0.3",
"json-schema": "^0.3.0",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"uuid": "^8.0.0",
"yup": "^0.29.3"
},
packages/cli/package.json
+1 -1
View File
@@ -82,7 +82,7 @@
"jest": "^26.0.1",
"jest-css-modules": "^2.1.0",
"json-schema": "^0.3.0",
"lodash": "^4.17.19",
"lodash": "^4.17.21",
"mini-css-extract-plugin": "^1.4.1",
"node-libs-browser": "^2.2.1",
"ora": "^5.3.0",
packages/config/package.json
+1 -1
View File
@@ -30,7 +30,7 @@
"clean": "backstage-cli clean"
},
"dependencies": {
"lodash": "^4.17.15"
"lodash": "^4.17.21"
},
"devDependencies": {
"@types/jest": "^26.0.7",
packages/core-components/package.json
+1 -1
View File
@@ -50,7 +50,7 @@
"d3-zoom": "^2.0.0",
"dagre": "^0.8.5",
"immer": "^9.0.1",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"pluralize": "^8.0.0",
"prop-types": "^15.7.2",
"qs": "^6.9.4",
plugins/catalog-backend-module-ldap/package.json
+1 -1
View File
@@ -34,7 +34,7 @@
"@backstage/plugin-catalog-backend": "^0.13.3",
"@types/ldapjs": "^2.2.0",
"ldapjs": "^2.2.0",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"winston": "^3.2.1"
},
"devDependencies": {
plugins/catalog-backend-module-msgraph/package.json
+1 -1
View File
@@ -35,7 +35,7 @@
"@backstage/plugin-catalog-backend": "^0.13.5",
"@microsoft/microsoft-graph-types": "^1.25.0",
"cross-fetch": "^3.0.6",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"p-limit": "^3.0.2",
"winston": "^3.2.1",
"qs": "^6.9.4"
plugins/catalog-backend/package.json
+1 -1
View File
@@ -51,7 +51,7 @@
"git-url-parse": "^11.6.0",
"glob": "^7.1.6",
"knex": "^0.95.1",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"luxon": "^2.0.2",
"morgan": "^1.10.0",
"p-limit": "^3.0.2",
plugins/catalog-react/package.json
+1 -1
View File
@@ -41,7 +41,7 @@
"@material-ui/lab": "4.0.0-alpha.57",
"@types/react": "*",
"jwt-decode": "^3.1.0",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"qs": "^6.9.4",
"react": "^16.13.1",
"react-router": "6.0.0-beta.0",
plugins/circleci/package.json
+1 -1
View File
@@ -42,7 +42,7 @@
"@material-ui/lab": "4.0.0-alpha.57",
"circleci-api": "^4.0.0",
"humanize-duration": "^3.27.0",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"luxon": "^2.0.2",
"react": "^16.13.1",
"react-dom": "^16.13.1",
plugins/kafka-backend/package.json
+1 -1
View File
@@ -40,7 +40,7 @@
"express": "^4.17.1",
"express-promise-router": "^4.1.0",
"kafkajs": "^1.16.0-beta.6",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"winston": "^3.2.1"
},
"devDependencies": {
plugins/kubernetes-backend/package.json
+1 -1
View File
@@ -47,7 +47,7 @@
"express-promise-router": "^4.1.0",
"fs-extra": "9.1.0",
"helmet": "^4.0.0",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"morgan": "^1.10.0",
"stream-buffers": "^3.0.2",
"winston": "^3.2.1",
plugins/rollbar-backend/package.json
+1 -1
View File
@@ -42,7 +42,7 @@
"express-promise-router": "^4.1.0",
"fs-extra": "9.1.0",
"helmet": "^4.0.0",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"morgan": "^1.10.0",
"winston": "^3.2.1",
"yn": "^4.0.0"
plugins/rollbar/package.json
+1 -1
View File
@@ -40,7 +40,7 @@
"@material-ui/core": "^4.12.2",
"@material-ui/icons": "^4.9.1",
"@material-ui/lab": "4.0.0-alpha.57",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"react": "^16.13.1",
"react-dom": "^16.13.1",
"react-router": "6.0.0-beta.0",
plugins/search-backend-module-pg/package.json
+1 -1
View File
@@ -23,7 +23,7 @@
"@backstage/backend-common": "^0.9.1",
"@backstage/search-common": "^0.2.0",
"@backstage/plugin-search-backend-node": "^0.4.2",
"lodash": "^4.17.15",
"lodash": "^4.17.21",
"knex": "^0.95.1"
},
"devDependencies": {