Visitar URL original
Bump lodash from 4.17.20 to 4.17.21 by dependabot[bot] · Pull Request #791 · release-drafter/release-drafter · GitHub
Skip to content

Bump lodash from 4.17.20 to 4.17.21 - #791

Merged
jetersen merged 2 commits into
masterfrom
dependabot/npm_and_yarn/lodash-4.17.21
Mar 15, 2021
Merged

jetersen merged 2 commits into
masterfrom
dependabot/npm_and_yarn/lodash-4.17.21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 22, 2021 •

Copy link
Copy Markdown
Contributor

Bumps lodash from 4.17.20 to 4.17.21.

Commits
  • f299b52 Bump to v4.17.21
  • c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
  • 3469357 Prevent command injection through _.template's variable option
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot dependabot Bot added the type: dependencies Pull requests that update a dependency file label Feb 22, 2021
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lodash-4.17.21 branch from 225990b to 741c348 Compare March 8, 2021 09:08
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.20...4.17.21)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lodash-4.17.21 branch from 741c348 to a465d51 Compare March 12, 2021 07:59
@jetersen
jetersen merged commit 777101c into master Mar 15, 2021
@jetersen
jetersen deleted the dependabot/npm_and_yarn/lodash-4.17.21 branch March 15, 2021 05:46
This was referenced Mar 16, 2021
This was referenced Mar 17, 2021
christopherklint97 pushed a commit to christopherklint97/release-drafter that referenced this pull request Mar 7, 2026
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joseph Petersen <josephp90@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant