Skip to content

chore(deps): update dependency lodash-es to v4.18.1 [security]#3274

Merged
SoonIter merged 2 commits intomainfrom
renovate/npm-lodash-es-vulnerability
Apr 2, 2026
Merged

chore(deps): update dependency lodash-es to v4.18.1 [security]#3274
SoonIter merged 2 commits intomainfrom
renovate/npm-lodash-es-vulnerability

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 2, 2026

  • Investigate CI failure
  • Identify root cause: pnpmfileChecksum was accidentally removed from pnpm-lock.yaml during the lodash-es update
  • Fix: run pnpm install --no-frozen-lockfile to restore the checksum in the lockfile

Timeless0911
Timeless0911 previously approved these changes Apr 2, 2026
@Timeless0911
Copy link
Copy Markdown
Contributor

@copilot fix ci

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 2, 2026

@copilot fix ci

Fixed in ab4b2ef. The pnpmfileChecksum line was accidentally removed from pnpm-lock.yaml during the lodash-es version bump. Restored it by running pnpm install --no-frozen-lockfile.

@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Apr 2, 2026

Deploying rspress-v2 with  Cloudflare Pages  Cloudflare Pages

Latest commit: ab4b2ef
Status: ✅  Deploy successful!
Preview URL: https://1254e2b3.rspress-v2.pages.dev
Branch Preview URL: https://renovate-npm-lodash-es-vulne.rspress-v2.pages.dev

View logs

@SoonIter SoonIter enabled auto-merge (squash) April 2, 2026 11:35
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 2, 2026

Rsdoctor Bundle Diff Analysis

Found 3 projects in monorepo, 0 projects with changes.

📊 Quick Summary
Project Total Size Change
node 12.6 MB 0
node_md 1.6 MB 0
web 16.3 MB 0

Generated by Rsdoctor GitHub Action

@SoonIter SoonIter merged commit 9704574 into main Apr 2, 2026
6 checks passed
@SoonIter SoonIter deleted the renovate/npm-lodash-es-vulnerability branch April 2, 2026 11:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants