Skip to content

chore: update lodash and bump serialize-javascript to 7.0.5#60

Merged
corwinm merged 2 commits into
mainfrom
fix/dependabot-45-serialize-javascript
Apr 3, 2026
Merged

chore: update lodash and bump serialize-javascript to 7.0.5#60
corwinm merged 2 commits into
mainfrom
fix/dependabot-45-serialize-javascript

Conversation

@corwinm

@corwinm corwinm commented Apr 3, 2026

Copy link
Copy Markdown
Owner

Summary

  • update the transitive lodash resolution in pnpm-lock.yaml from 4.17.23 to 4.18.1
  • bump the mocha>serialize-javascript pnpm override from 7.0.3 to the patched 7.0.5
  • refresh the lockfile so the repo resolves the updated dependency set and fixes dependabot alert fix: Update tmp and @eslint/plugin-kit #45 (GHSA-qj8w-gfj5-8c6v)

@corwinm corwinm changed the title chore: bump serialize-javascript to 7.0.5 chore: update lodash and bump serialize-javascript to 7.0.5 Apr 3, 2026
@corwinm
corwinm merged commit af26617 into main Apr 3, 2026
9 of 12 checks passed
@corwinm
corwinm deleted the fix/dependabot-45-serialize-javascript branch April 3, 2026 22:55
@github-actions

github-actions Bot commented Apr 4, 2026

Copy link
Copy Markdown

🎉 This PR is included in version 0.1.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant