2015 was big year! Lodash became the most depended on npm package, passed 1 billion downloads, & its v3 release saw massive adoption!
The year was also one of collaboration, as discussions began on merging Lodash & Underscore. Much of Lodash v4 is proofing out the ideas from those discussions. Lodash v4 would not be possible without the collaboration & contributions of the Underscore core team. In the spirit of merging our teams have blended with several members contributing to both libraries.
For 2016 & lodash v4.0.0 we wanted to cut loose, push forward, & take things up a notch!
Lodash’s kitchen-sink size will continue to grow as new methods & functionality are added. However, we now offer a 4 kB (gzipped) core build that’s compatible with Backbone v1.2.4 for folks who want Lodash without lugging around the kitchen sink.
More ES6
We’ve continued to embrace ES6 with methods like _.isSymbol, added support for cloning & comparing array buffers, maps, sets, & symbols, converting iterators to arrays, & iterable _(…).
In addition, we’ve published an es-build & pulled babel-plugin-lodash into core to make tree-shaking a breeze.
More Modular
Pop quiz! 📣
What category path does the bindAll method belong to? Is it
A) require('lodash/function/bindAll')
B) require('lodash/utility/bindAll')
C) require('lodash/util/bindAll')
Don’t know? Well, with v4 it doesn’t matter because now module paths are as simple as
var bindAll = require('lodash/bindAll');
We’ve also reduced module complexity making it easier to create smaller bundles. This has helped Lodash adoption with libraries like Async & Redux!
v1.6.1
date: 2023-01-31
changes:
- Downgrades to glob 7 for Windows compatability
- Removes mkdirp and rimraf in favour of node.js APIs.
v1.6.0
date: 2023-01-28
changes:
- Requires node.js 16+.
- template.date now uses dateformat ~4.6.2.
- other dependency updates such as glob, rimraf, etc.
v1.5.3
date: 2022-04-23
changes:
- Patch up race condition in symlink copying.
v1.5.2
date: 2022-04-12
changes:
- Unlink symlinks when copy destination is a symlink.
v1.5.1
date: 2022-04-11
changes:
- Fixed symlink destination handling.
v1.5.0
date: 2022-04-10
changes:
- Updated dependencies.
- Add symlink handling for copying files.
v1.4.1
date: 2021-05-24
changes:
- Fix --preload option to be a known option
- Switch to GitHub Actions
v1.4.0
date: 2021-04-21
changes:
- Security fixes in production and dev dependencies
- Liftup/Liftoff upgrade breaking change. Update your scripts to use --preload instead of --require. Ref: https://github.com/js-cli/js-liftoff/commit/e7a969d6706e730d90abb4e24d3cb4d3bce06ddb.
v1.3.0
date: 2020-08-18
changes:
- Switch to use safeLoad for loading YML files via file.readYAML.
- Upgrade legacy-log to ~3.0.0.
- Upgrade legacy-util to ~2.0.0.
v1.2.1
date: 2020-07-07
changes:
- Remove path-is-absolute dependency.
(PR: gruntjs/grunt#1715)
v1.2.0
This version was pushed to npm by vladikoff, a new releaser for grunt since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sarvex/Ghost/network/alerts).
Bumps the npm_and_yarn group with 7 updates in the /. directory:
0.8.4
2.4.1
2.4.1
4.17.21
1.5.0
1.9.1
1.4.2
1.4.8
2.51.0
2.88.2
1.3.12
1.8.14
0.4.5
1.6.1
Updates
express-hbs
from 0.8.4 to 2.4.1Release notes
Sourced from express-hbs's releases.
... (truncated)
Commits
db19b29
v2.4.1ce088f0
Fixed inline async helpers not working in isolation (#251)3859825
Lock file maintenanced5d4ed0
Lock file maintenance98dec46
Update dependency rewire to v7ecee1f3
Update dependency eslint to v8.47.0a5e3287
Lock file maintenance7e7faa4
2023f6e7662
Update dependency handlebars to v4.7.83747c10
Lock file maintenanceMaintainer changes
This version was pushed to npm by allouis, a new releaser for express-hbs since your current version.
Updates
lodash
from 2.4.1 to 4.17.21Release notes
Sourced from lodash's releases.
... (truncated)
Commits
f299b52
Bump to v4.17.21c4847eb
Improve performance oftoNumber
,trim
andtrimEnd
on large input strings3469357
Prevent command injection through_.template
'svariable
optionded9bc6
Bump to v4.17.20.63150ef
Documentation fixes.00f0f62
test.js: Remove trailing comma.846e434
Temporarily use a custom fork oflodash-cli
.5d046f3
Re-enable Travis tests on4.17
branch.aa816b3
Remove/npm-package
.d7fbc52
Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
morgan
from 1.5.0 to 1.9.1Release notes
Sourced from morgan's releases.
... (truncated)
Changelog
Sourced from morgan's changelog.
... (truncated)
Commits
572dd93
1.9.1e02de38
lint: apply standard 12 stylee329663
Fix using special characters in formateb1968a
tests: use strict equality checks310b206
build: use yaml eslint configuration5810937
build: Node.js@9.11f60afd5
build: Node.js@8.115295b0c
build: eslint-plugin-standard@3.1.0178daaf
build: eslint-plugin-promise@3.8.07b08641
build: eslint-plugin-import@2.12.0Updates
node-uuid
from 1.4.2 to 1.4.8Commits
Updates
request
from 2.51.0 to 2.88.2Changelog
Sourced from request's changelog.
... (truncated)
Commits
Updates
bower
from 1.3.12 to 1.8.14Release notes
Sourced from bower's releases.
... (truncated)
Changelog
Sourced from bower's changelog.
... (truncated)
Commits
d765b2b
Bump to 1.8.14ca23b46
Run CI only on node 6+7f26c5b
Fix bug unauthenticated git protocol in GitHubResolver (#2612)4b5722f
Update README.md557c1cd
Fix mode for bin/bower74560b7
Fix child process execution2905791
Fix running bower on non-windowsdfdda3f
Merge remote-tracking branch 'origin/master'fa36814
Bump to 1.8.13f19bc34
Make sure correct git/svn binary is always usedMaintainer changes
This version was pushed to npm by sheerun, a new releaser for bower since your current version.
Updates
grunt
from 0.4.5 to 1.6.1Release notes
Sourced from grunt's releases.
... (truncated)
Changelog
Sourced from grunt's changelog.
... (truncated)
Commits
8372e11
1.6.172f6f03
Changelog updates8d4c183
Merge pull request #1755 from gruntjs/rm-dep1c7d483
Add recursive2d4fd38
Merge pull request #1756 from gruntjs/downgrade-glob902db7c
Downgrade glob494f243
Fix syntaxb01389e
remove mkdirp0072510
remove dep on rimraf and mkdirp0afeb5c
1.6.0Maintainer changes
This version was pushed to npm by vladikoff, a new releaser for grunt since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show