Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: reran yarn command for repo #233

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Kirandeepv
Copy link

@Kirandeepv Kirandeepv commented Aug 10, 2020

Background

We have ng-redux as one of our package dependencies. While working on a security issues with lodash < 4.17.13 I realized that ng-redux is bringing in lodash@4.17.13 instead of latest version inferring it from ^4.17.13

Here's how package.json specifies the dependencies:

"dependencies": {
    "babel-runtime": "^6.26.0",
    "invariant": "^2.2.2",
    "lodash": "^4.17.13"
  },

There was a change made to remove precise locking of lodash dependency in this PR but seems like the lockfile wasn't updated with that change.

Details

This PR runs yarn command for this repo and updates the dependencies.

@Kirandeepv
Copy link
Author

@AntJanus Looping you here since you might have context from the above mentioned PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant