8000 fix(@vue/cli-service): Update lodash.defaultsdeep · vuejs/vue-cli@ed34b96 · GitHub
[go: up one dir, main page]
Skip to content

Commit ed34b96

Browse files
author
emizzle
committed
fix(@vue/cli-service): Update lodash.defaultsdeep
Update `lodash.defaultsdeep` to version `^4.6.1`. This is causing a high severity vulnerability in our repo. Fixed in lodash/lodash#4336.
1 parent eda08fb commit ed34b96

File tree

2 files changed

+64
-11
lines changed

2 files changed

+64
-11
lines changed

‎packages/@vue/cli-service/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@
5656
"hash-sum": "^1.0.2",
5757
"html-webpack-plugin": "^3.2.0",
5858
"launch-editor-middleware": "^2.2.1",
59-
"lodash.defaultsdeep": "^4.6.0",
59+
"lodash.defaultsdeep": "^4.6.1",
6060
"lodash.mapvalues": "^4.6.0",
6161
"lodash.transform": "^4.6.0",
6262
"mini-css-extract-plugin": "^0.6.0",

‎yarn.lock

Lines changed: 63 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -4234,6 +4234,18 @@ check-types@^7.3.0:
42344234
resolved "https://registry.yarnpkg.com/check-types/-/check-types-7.4.0.tgz#0378ec1b9616ec71f774931a3c6516fad8c152f4"
42354235
integrity sha512-YbulWHdfP99UfZ73NcUDlNJhEIDgm9Doq9GhpyXbF+7Aegi3CVV7qqMCKTTqJxlvEvnQBp9IA+dxsGN6xK/nSg==
42364236

4237+
cheerio@^1.0.0-rc.2:
4238+
version "1.0.0-rc.3"
4239+
resolved "https://registry.yarnpkg.com/cheerio/-/cheerio-1.0.0-rc.3.tgz#094636d425b2e9c0f4eb91a46c05630c9a1a8bf6"
4240+
integrity sha512-0td5ijfUPuubwLUu0OBoe98gZj8C/AA+RW3v67GPlGOrvxWjZmBXiBCRU+I8VEiNyJzjth40POfHiz2RB3gImA==
4241+
dependencies:
4242+
css-select "~1.2.0"
4243+
dom-serializer "~0.1.1"
4244+
entities "~1.1.1"
4245+
htmlparser2 "^3.9.1"
4246+
lodash "^4.15.0"
4247+
parse5 "^3.0.1"
4248+
42374249
chokidar@^2.0.0, chokidar@^2.0.2, chokidar@^2.0.3, chokidar@^2.0.4, chokidar@^2.1.5, chokidar@^2.1.6:
42384250
version "2.1.6"
42394251
resolved "https://registry.yarnpkg.com/chokidar/-/chokidar-2.1.6.tgz#b6cad653a929e244ce8a834244164d241fa954c5"
@@ -5163,7 +5175,7 @@ css-select-base-adapter@^0.1.1:
51635175
resolved "https://registry.yarnpkg.com/css-select-base-adapter/-/css-select-base-adapter-0.1.1.tgz#3b2ff4972cc362ab88561507a95408a1432135d7"
51645176
integrity sha512-jQVeeRG70QI08vSTwf1jHxp74JoZsr2XSgETae8/xC8ovSnL2WF87GTLO86Sbwdt2lK4Umg4HnnwMO4YF3Ce7w==
51655177

5166-
css-select@^1.1.0:
5178+
css-select@^1.1.0, css-select@~1.2.0:
51675179
version "1.2.0"
51685180
resolved "https://registry.yarnpkg.com/css-select/-/css-select-1.2.0.tgz#2b3a110539c5355f1cd8d314623e870b121ec858"
51695181
integrity sha1-KzoRBTnFNV8c2NMUYj6HCxIeyFg=
@@ -5622,6 +5634,14 @@ default-gateway@^4.2.0:
56225634
execa "^1.0.0"
56235635
ip-regex "^2.1.0"
56245636

5637+
default-gateway@^5.0.2:
5638+
version "5.0.2"
5639+
resolved "https://registry.yarnpkg.com/default-gateway/-/default-gateway-5.0.2.tgz#d2d8a13d6fee406d9365d19ec9adccb8a60b82b3"
5640+
integrity sha512-wXuT0q8T5vxQNecrTgz/KbU2lPUMRc98I9Y5dnH3yhFB3BGYqtADK4lhivLlG0OfjhmfKx1PGILG2jR4zjI+WA==
5641+
dependencies:
5642+
execa "^1.0.0"
5643+
ip-regex "^2.1.0"
5644+
56255645
default-require-extensions@^1.0.0:
56265646
version "1.0.0"
56275647
resolved "https://registry.yarnpkg.com/default-require-extensions/-/default-require-extensions-1.0.0.tgz#f37ea15d3e13ffd9b437d33e1a75b5fb97874cb8"
@@ -5754,6 +5774,11 @@ detect-indent@^5.0.0:
57545774
resolved "https://registry.yarnpkg.com/detect-indent/-/detect-indent-5.0.0.tgz#3871cc0a6a002e8c3e5b3cf7f336264675f06b9d"
57555775
integrity sha1-OHHMCmoALow+Wzz38zYmRnXwa50=
57565776

5777+
detect-indent@^6.0.0:
5778+
version "6.0.0"
5779+
resolved "https://registry.yarnpkg.com/detect-indent/-/detect-indent-6.0.0.tgz#0abd0f549f69fc6659a254fe96786186b6f528fd"
5780+
integrity sha512-oSyFlqaTHCItVRGK5RmrmjB+CmaMOW7IaNA/kdxqhoa6d17j/5ce9O9eWXmV/KEdRwqpQA+Vqe8a8Bsybu4YnA==
5781+
57575782
detect-libc@^1.0.2, detect-libc@^1.0.3:
57585783
version "1.0.3"
57595784
resolved "https://registry.yarnpkg.com/detect-libc/-/detect-libc-1.0.3.tgz#fa137c4bd698edf55cd5cd02ac559f91a4c4ba9b"
@@ -5900,7 +5925,7 @@ dom-event-types@^1.0.0:
59005925
resolved "https://registry.yarnpkg.com/dom-event-types/-/dom-event-types-1.0.0.tgz#5830a0a29e1bf837fe50a70cd80a597232813cae"
59015926
integrity sha512-2G2Vwi2zXTHBGqXHsJ4+ak/iP0N8Ar+G8a7LiD2oup5o4sQWytwqqrZu/O6hIMV0KMID2PL69OhpshLO0n7UJQ==
59025927

5903-
dom-serializer@0:
5928+
dom-serializer@0, dom-serializer@~0.1.1:
59045929
version "0.1.1"
59055930
resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-0.1.1.tgz#1ec4059e284babed36eec2941d4a970a189ce7c0"
59065931
integrity sha512-l0IU0pPzLWSHBcieZbpOKgkIn3ts3vAh7ZuFyXNwJxJXk/c4Gwj9xaTJwIDVQCXawWD0qb3IzMGH5rglQaO0XA==
@@ -8309,7 +8334,7 @@ html-webpack-plugin@^3.2.0:
83098334
toposort "^1.0.0"
83108335
util.promisify "1.0.0"
83118336

8312-
htmlparser2@^3.3.0:
8337+
htmlparser2@^3.3.0, htmlparser2@^3.9.1:
83138338
version "3.10.1"
83148339
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-3.10.1.tgz#bd679dc3f59897b6a34bb10749c855bb53a9392f"
83158340
integrity sha512-IgieNijUMbkDovyoKObU1DUhm1iwNYE/fuifEoEHfd1oZKZDaONBSkal7Y01shxsM49R4XaMdGez3WnF9UfiCQ==
@@ -8583,11 +8608,16 @@ indent-string@^2.1.0:
85838608
dependencies:
85848609
repeating "^2.0.0"
85858610

8586-
indent-string@^3.0.0:
8611+
indent-string@^3.0.0, indent-string@^3.2.0:
85878612
version "3.2.0"
85888613
resolved "https://registry.yarnpkg.com/indent-string/-/indent-string-3.2.0.tgz#4a5fd6d27cc332f37e5419a504dbb837105c9289"
85898614
integrity sha1-Sl/W0nzDMvN+VBmlBNu4NxBckok=
85908615

8616+
indent-string@^4.0.0:
8617+
version "4.0.0"
8618+
resolved "https://registry.yarnpkg.com/indent-string/-/indent-string-4.0.0.tgz#624f8f4497d619b2d9768531d58f4122854d7251"
8619+
integrity sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==
8620+
85918621
indexes-of@^1.0.1:
85928622
version "1.0.1"
85938623
resolved "https://registry.yarnpkg.com/indexes-of/-/indexes-of-1.0.1.tgz#f30f716c8e2bd346c7b67d3df3915566a7c05607"
@@ -10457,10 +10487,10 @@ lodash.defaultsdeep@4.3.2:
1045710487
lodash.mergewith "^4.0.0"
1045810488
lodash.rest "^4.0.0"
1045910489

10460-
lodash.defaultsdeep@^4.6.0:
10461-
version "4.6.0"
10462-
resolved "https://registry.yarnpkg.com/lodash.defaultsdeep/-/lodash.defaultsdeep-4.6.0.tgz#bec1024f85b1bd96cbea405b23c14ad6443a6f81"
10463-
integrity sha1-vsECT4WxvZbL6kBbI8FK1kQ6b4E=
10490+
lodash.defaultsdeep@^4.6.1:
10491+
version "4.6.1"
10492+
resolved "https://registry.yarnpkg.com/lodash.defaultsdeep/-/lodash.defaultsdeep-4.6.1.tgz#512e9bd721d272d94e3d3a63653fa17516741ca6"
10493+
integrity sha512-3j8wdDzYuWO3lM3Reg03MuQR957t287Rpcxp1njpEa8oDrikb+FwGdW3n+FELh/A6qib6yPit0j/pv9G/yeAqA==
1046410494

1046510495
lodash.get@^4.4.2:
1046610496
version "4.4.2"
@@ -10596,6 +10626,11 @@ lodash@4, lodash@4.17.11, lodash@4.x, lodash@^4.11.1, lodash@^4.17.10, lodash@^4
1059610626
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
1059710627
integrity sha512-cQKh8igo5QUhZ7lg38DYWAxMvjSAKG0A8wGSVimP07SIUEK2UO+arSRKbRZWtelMtN5V0Hkwh5ryOto/SshYIg==
1059810628

10629+
lodash@^4.15.0:
10630+
version "4.17.14"
10631+
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.14.tgz#9ce487ae66c96254fe20b599f21b6816028078ba"
10632+
integrity sha512-mmKYbW3GLuJeX+iGP+Y7Gp1AiGHGbXHCOh/jZmrawMmsE7MS4znI3RL2FsjbqOyMayHInjOeykW7PEajUk1/xw==
10633+
1059910634
log-symbols@2.2.0, log-symbols@^2.1.0, log-symbols@^2.2.0:
1060010635
version "2.2.0"
1060110636
resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-2.2.0.tgz#5740e1c5d6f0dfda4ad9323b5332107ef6b4c40a"
@@ -12398,7 +12433,7 @@ parse5@5.1.0:
1239812433
resolved "https://registry.yarnpkg.com/parse5/-/parse5-5.1.0.tgz#c59341c9723f414c452975564c7c00a68d58acd2"
1239912434
integrity sha512-fxNG2sQjHvlVAYmzBZS9YlDp6PTSSDwa98vkD4QgVDDCAo84z5X1t5XyJQ62ImdLXx5NdIIfihey6xpum9/gRQ==
1240012435

12401-
parse5@^3.0.3:
12436+
parse5@^3.0.1, parse5@^3.0.3:
1240212437
version "3.0.3"
1240312438
resolved "https://registry.yarnpkg.com/parse5/-/parse5-3.0.3.tgz#042f792ffdd36851551cf4e9e066b3874ab45b5c"
1240412439
integrity sha512-rgO9Zg5LLLkfJF9E6CCmXlSE4UVceloys8JrFqCcHloC3usd/kJCyPDwH2SOlzix2j3xaP9sUX3e8+kvkuleAA==
@@ -16241,6 +16276,17 @@ vue-jest@^3.0.4:
1624116276
tsconfig "^7.0.0"
1624216277
vue-template-es2015-compiler "^1.6.0"
1624316278

16279+
vue-jscodeshift-adapter@^2.0.2:
16280+
version "2.0.2"
16281+
resolved "https://registry.yarnpkg.com/vue-jscodeshift-adapter/-/vue-jscodeshift-adapter-2.0.2.tgz#67824b360ad84d06f5200f5269ad419a947e7e97"
16282+
integrity sha512-EnRKDgQXGHnNbHpHdTEqBfDMxRPFSUc/hlDNLd9ucgdfpJ3S6o/V6og+CfNYgGPO2GKD6AQOsd+lltRuoM/SVA==
16283+
dependencies:
16284+
cheerio "^1.0.0-rc.2"
16285+
detect-indent "^6.0.0"
16286+
indent-string "^4.0.0"
16287+
vue-sfc-descriptor-to-string "^1.0.0"
16288+
vue-template-compiler "^2.5.13"
16289+
1624416290
vue-loader@^15.2.4, vue-loader@^15.7.0:
1624516291
version "15.7.0"
1624616292
resolved "https://registry.yarnpkg.com/vue-loader/-/vue-loader-15.7.0.tgz#27275aa5a3ef4958c5379c006dd1436ad04b25b3"
@@ -16303,6 +16349,13 @@ vue-server-renderer@^2.5.16, vue-server-renderer@^2.6.10:
1630316349
serialize-javascript "^1.3.0"
1630416350
source-map "0.5.6"
1630516351

16352+
vue-sfc-descriptor-to-string@^1.0.0:
16353+
version "1.0.0"
16354+
resolved "https://registry.yarnpkg.com/vue-sfc-descriptor-to-string/-/vue-sfc-descriptor-to-string-1.0.0.tgz#71e0a648508da9b43a995a595f1e9e570fda92bd"
16355+
integrity sha512-VYNMsrIPZQZau5Gk8IVtgonN1quOznP9/pLIF5m2c4R30KCDDe3NwthrsM7lSUY2K4lezcb8j3Wu8cQhBuZEMQ==
16356+
dependencies:
16357+
indent-string "^3.2.0"
16358+
1630616359
vue-style-loader@^4.1.0:
1630716360
version "4.1.2"
1630816361
resolved "https://registry.yarnpkg.com/vue-style-loader/-/vue-style-loader-4.1.2.tgz#dedf349806f25ceb4e64f3ad7c0a44fba735fcf8"
@@ -16311,7 +16364,7 @@ vue-style-loader@^4.1.0:
1631116364
hash-sum "^1.0.2"
1631216365
loader-utils "^1.0.2"
1631316366

16314-
vue-template-compiler@^2.5.16, vue-template-compiler@^2.6.10:
16367+
vue-template-compiler@^2.5.13, vue-template-compiler@^2.5.16, vue-template-compiler@^2.6.10:
1631516368
version "2.6.10"
1631616369
resolved "https://registry.yarnpkg.com/vue-template-compiler/-/vue-template-compiler-2.6.10.tgz#323b4f3495f04faa3503337a82f5d6507799c9cc"
1631716370
integrity sha512-jVZkw4/I/HT5ZMvRnhv78okGusqe0+qH2A0Em0Cp8aq78+NK9TII263CDVz2QXZsIT+yyV/gZc/j/vlwa+Epyg==

0 commit comments

Comments
 (0)
0