131.md (5412B)
1 # PR #131 chore(deps): bump lodash from 4.17.13 to 4.17.19 2 3 - **Status:** open 4 - **Author:** @dependabot[bot] 5 - **Created:** 2020-07-17T11:13:41Z 6 - **Branch:** dependabot/npm_and_yarn/lodash-4.17.19 → master 7 - **Labels:** dependencies 8 - **Diff:** [131.diff](./131.diff) 9 10 --- 11 12 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.13 to 4.17.19. 13 <details> 14 <summary>Release notes</summary> 15 <p><em>Sourced from <a href="https://github.com/lodash/lodash/releases">lodash's releases</a>.</em></p> 16 <blockquote> 17 <h2>4.17.16</h2> 18 </blockquote> 19 </details> 20 <details> 21 <summary>Commits</summary> 22 <ul> 23 <li><a href="https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056"><code>d7fbc52</code></a> Bump to v4.17.19</li> 24 <li><a href="https://github.com/lodash/lodash/commit/2e1c0f22f425e9c013815b2cd7c2ebd51f49a8d6"><code>2e1c0f2</code></a> Add npm-package</li> 25 <li><a href="https://github.com/lodash/lodash/commit/1b6c282299f4e0271f932b466c67f0f822aa308e"><code>1b6c282</code></a> Bump to v4.17.18</li> 26 <li><a href="https://github.com/lodash/lodash/commit/a370ac81408de2da77a82b3c4b61a01a3b9c2fac"><code>a370ac8</code></a> Bump to v4.17.17</li> 27 <li><a href="https://github.com/lodash/lodash/commit/1144918f3578a84fcc4986da9b806e63a6175cbb"><code>1144918</code></a> Rebuild lodash and docs</li> 28 <li><a href="https://github.com/lodash/lodash/commit/3a3b0fd339c2109563f7e8167dc95265ed82ef3e"><code>3a3b0fd</code></a> Bump to v4.17.16</li> 29 <li><a href="https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12"><code>c84fe82</code></a> fix(zipObjectDeep): prototype pollution (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4759">#4759</a>)</li> 30 <li><a href="https://github.com/lodash/lodash/commit/e7b28ea6cb17b4ca021e7c9d66218c8c89782f32"><code>e7b28ea</code></a> Sanitize sourceURL so it cannot affect evaled code (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4518">#4518</a>)</li> 31 <li><a href="https://github.com/lodash/lodash/commit/0cec225778d4ac26c2bac95031ecc92a94f08bbb"><code>0cec225</code></a> Fix lodash.isEqual for circular references (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4320">#4320</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4515">#4515</a>)</li> 32 <li><a href="https://github.com/lodash/lodash/commit/94c3a8133cb4fcdb50db72b4fd14dd884b195cd5"><code>94c3a81</code></a> Document matches* shorthands for over* methods (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4510">#4510</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4514">#4514</a>)</li> 33 <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.13...4.17.19">compare view</a></li> 34 </ul> 35 </details> 36 <details> 37 <summary>Maintainer changes</summary> 38 <p>This version was pushed to npm by <a href="https://www.npmjs.com/~mathias">mathias</a>, a new releaser for lodash since your current version.</p> 39 </details> 40 <br /> 41 42 43 [](https://help.github.com/articles/configuring-automated-security-fixes) 44 45 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 46 47 [//]: # (dependabot-automerge-start) 48 [//]: # (dependabot-automerge-end) 49 50 --- 51 52 <details> 53 <summary>Dependabot commands and options</summary> 54 <br /> 55 56 You can trigger Dependabot actions by commenting on this PR: 57 - `@dependabot rebase` will rebase this PR 58 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 59 - `@dependabot merge` will merge this PR after your CI passes on it 60 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 61 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 62 - `@dependabot reopen` will reopen this PR if it is closed 63 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 64 - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) 65 - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) 66 - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) 67 - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language 68 - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language 69 - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language 70 - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language 71 72 You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/MTRNord/freifunk-bot/network/alerts). 73 74 </details> 75