Skip to content

build(deps): bump lodash from 4.17.21 to 4.18.1 - #41

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/lodash-4.18.1
Open

build(deps): bump lodash from 4.17.21 to 4.18.1#41
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/lodash-4.18.1

build(deps): bump lodash from 4.17.21 to 4.18.1

d5fe2eb
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Apr 6, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR

Details

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
lodash 4.17.21 4.18.1 yarn.lock 2026-04-01T21:01:20Z
⏲️ History

Previous invocation results of same check:

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

❌ NPM Package Cooldown Check

The following npm packages added in current PR are recent versions(not older than 7 days). This check will pass at 2026-04-09T21:01:20Z

Package Name Previous Version Current Version file Current Version Release Date
lodash 4.17.21 4.18.1 yarn.lock 2026-04-01T21:01:20Z

To approve check run click here

View more details on StepSecurity Actions Security