search

djscheuf / journeymans-blog

Journeyman's Travels running on Hexo
0 stars 0 forks source link

Upgrade Lodash #16

Closed djscheuf closed 4 years ago

djscheuf commented 5 years ago

Received Security/Vulnerability Warning from Github. Need to upgrade Lodash to 4.17.11, or else move it to devDependency.

Given this is a static site generator, devDependency should be sufficient, should do both to be sure. Since this may impact Hexo generation, should do these steps in 2 commits for testing.

Reference: Lodah Alert

djscheuf commented 4 years ago

May have been resolved by Github Dependabot's merges. Thank you Dependabot.