Bump lodash to 4.17.9 to mitigate vulnerability

Bunp lodash to version 4.17.9 to mitigate vulnerability. This is done with the help of a resolution to allow upgrading symfony-encore.
OpenConext · Jul 30, 2020 · 4bce9dc · 4bce9dc
1 parent e0f3a6a
commit 4bce9dc
Show file tree

Hide file tree

Showing 3 changed files with 667 additions and 926 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+# 4.1.1
+**Feature**
+ * Bump lodash to 4.17.9 to mitigate vulnerability #240
+
 # 4.1.0
 **Feature**
  * Make the the prove possession step optional #238

diff --git a/package.json b/package.json
@@ -18,5 +18,8 @@
         "dev": "encore dev",
         "watch": "encore dev --watch --watch-poll=300",
         "build": "encore production --progress"
+    },
+    "resolutions": {
+        "**/**/lodash": "^4.17.19"
     }
 }