131.json (5697B)
1 { 2 "number": 131, 3 "title": "chore(deps): bump lodash from 4.17.13 to 4.17.19", 4 "state": "open", 5 "diff_file": "131.diff", 6 "author": "dependabot[bot]", 7 "created_at": "2020-07-17T11:13:41Z", 8 "closed_at": null, 9 "merged_at": null, 10 "base_ref": "master", 11 "head_ref": "dependabot/npm_and_yarn/lodash-4.17.19", 12 "labels": [ 13 "dependencies" 14 ], 15 "assignees": [], 16 "requested_reviewers": [], 17 "body": "Bumps [lodash](https://github.com/lodash/lodash) from 4.17.13 to 4.17.19.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/lodash/lodash/releases\">lodash's releases</a>.</em></p>\n<blockquote>\n<h2>4.17.16</h2>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056\"><code>d7fbc52</code></a> Bump to v4.17.19</li>\n<li><a href=\"https://github.com/lodash/lodash/commit/2e1c0f22f425e9c013815b2cd7c2ebd51f49a8d6\"><code>2e1c0f2</code></a> Add npm-package</li>\n<li><a href=\"https://github.com/lodash/lodash/commit/1b6c282299f4e0271f932b466c67f0f822aa308e\"><code>1b6c282</code></a> Bump to v4.17.18</li>\n<li><a href=\"https://github.com/lodash/lodash/commit/a370ac81408de2da77a82b3c4b61a01a3b9c2fac\"><code>a370ac8</code></a> Bump to v4.17.17</li>\n<li><a href=\"https://github.com/lodash/lodash/commit/1144918f3578a84fcc4986da9b806e63a6175cbb\"><code>1144918</code></a> Rebuild lodash and docs</li>\n<li><a href=\"https://github.com/lodash/lodash/commit/3a3b0fd339c2109563f7e8167dc95265ed82ef3e\"><code>3a3b0fd</code></a> Bump to v4.17.16</li>\n<li><a href=\"https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12\"><code>c84fe82</code></a> fix(zipObjectDeep): prototype pollution (<a href=\"https://github-redirect.dependabot.com/lodash/lodash/issues/4759\">#4759</a>)</li>\n<li><a href=\"https://github.com/lodash/lodash/commit/e7b28ea6cb17b4ca021e7c9d66218c8c89782f32\"><code>e7b28ea</code></a> Sanitize sourceURL so it cannot affect evaled code (<a href=\"https://github-redirect.dependabot.com/lodash/lodash/issues/4518\">#4518</a>)</li>\n<li><a href=\"https://github.com/lodash/lodash/commit/0cec225778d4ac26c2bac95031ecc92a94f08bbb\"><code>0cec225</code></a> Fix lodash.isEqual for circular references (<a href=\"https://github-redirect.dependabot.com/lodash/lodash/issues/4320\">#4320</a>) (<a href=\"https://github-redirect.dependabot.com/lodash/lodash/issues/4515\">#4515</a>)</li>\n<li><a href=\"https://github.com/lodash/lodash/commit/94c3a8133cb4fcdb50db72b4fd14dd884b195cd5\"><code>94c3a81</code></a> Document matches* shorthands for over* methods (<a href=\"https://github-redirect.dependabot.com/lodash/lodash/issues/4510\">#4510</a>) (<a href=\"https://github-redirect.dependabot.com/lodash/lodash/issues/4514\">#4514</a>)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/lodash/lodash/compare/4.17.13...4.17.19\">compare view</a></li>\n</ul>\n</details>\n<details>\n<summary>Maintainer changes</summary>\n<p>This version was pushed to npm by <a href=\"https://www.npmjs.com/~mathias\">mathias</a>, a new releaser for lodash since your current version.</p>\n</details>\n<br />\n\n\n[](https://help.github.com/articles/configuring-automated-security-fixes)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/MTRNord/freifunk-bot/network/alerts).\n\n</details>", 18 "comments": [], 19 "review_comments": [] 20 }