Skip to content

fix(deps): use caret version range for lodash#1423

Merged
ardatan merged 1 commit into
dotansimha:mainfrom
dargmuesli:fix/deps/lodash-caret
Apr 2, 2026
Merged

fix(deps): use caret version range for lodash#1423
ardatan merged 1 commit into
dotansimha:mainfrom
dargmuesli:fix/deps/lodash-caret

Conversation

@dargmuesli
Copy link
Copy Markdown
Contributor

@dargmuesli dargmuesli commented Apr 2, 2026

Description

Widen allowed lodash versions to fix security vulnerability.

Related # (issue)

Type of change

Please delete options that are not relevant.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as
    expected)
  • This change requires a documentation update

Screenshots/Sandbox (if appropriate/relevant):

n/a

How Has This Been Tested?

n/a

Test Environment:

n/a

Checklist:

  • I have followed the
    CONTRIBUTING doc and the
    style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • Any dependent changes have been merged and published in downstream modules

Further comments

Also see:

It may be worth an idea to consider switching to es-toolkit: https://es-toolkit.dev/reference/compat/object/set.html

@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Apr 2, 2026

🦋 Changeset detected

Latest commit: 6f18580

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@graphql-codegen/typescript-mongodb Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Comment thread yarn.lock Outdated
semver "^7.5.4"

"@oclif/config@1.18.16", "@oclif/config@^1.18.2":
"@oclif/config@1.18.16":
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need these changes in the lockfile?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

not necessarily, removed

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pipeline is green now 🍏 🙌

@dargmuesli dargmuesli force-pushed the fix/deps/lodash-caret branch from 4e3669a to 6f18580 Compare April 2, 2026 12:56
@ardatan ardatan merged commit 4f8402e into dotansimha:main Apr 2, 2026
15 checks passed
Copy link
Copy Markdown
Collaborator

@ardatan ardatan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@dargmuesli dargmuesli deleted the fix/deps/lodash-caret branch April 2, 2026 13:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants