Merge pull request #240 from OpenConext/feature/fix-lodash-vulnerability

Bump lodash to 4.17.9 to mitigate vulnerability
OpenConext · Jul 30, 2020 · 430c7e6 · 430c7e6
2 parents e0f3a6a + 4bce9dc
commit 430c7e6
Show file tree

Hide file tree

Showing 3 changed files with 667 additions and 926 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+# 4.1.1
+**Feature**
+ * Bump lodash to 4.17.9 to mitigate vulnerability #240
+
 # 4.1.0
 **Feature**
  * Make the the prove possession step optional #238

diff --git a/package.json b/package.json
@@ -18,5 +18,8 @@
         "dev": "encore dev",
         "watch": "encore dev --watch --watch-poll=300",
         "build": "encore production --progress"
+    },
+    "resolutions": {
+        "**/**/lodash": "^4.17.19"
     }
 }