From 5eb57636ceeb58c0f1bd3eb408706c04e75717f2 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Thu, 6 May 2021 16:45:25 +0000 Subject: [PATCH] [Security] Bump underscore from 1.9.1 to 1.12.1 Bumps [underscore](https://github.com/jashkenas/underscore) from 1.9.1 to 1.12.1. **This update includes a security fix.** - [Release notes](https://github.com/jashkenas/underscore/releases) - [Commits](https://github.com/jashkenas/underscore/compare/1.9.1...1.12.1) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 9 +++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 0ff2545..b736238 100644 --- a/package.json +++ b/package.json @@ -22,7 +22,7 @@ "react-scripts": "2.1.3", "react-select": "^2.3.0", "reactstrap": "^7.1.0", - "underscore": "^1.9.1" + "underscore": "^1.12.1" }, "scripts": { "start": "react-scripts start", diff --git a/yarn.lock b/yarn.lock index 3e2d020..d61e6bc 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2599,7 +2599,7 @@ compressible@~2.0.13: compression@^1.5.2: version "1.7.2" - resolved "http://registry.npmjs.org/compression/-/compression-1.7.2.tgz#aaffbcd6aaf854b44ebb280353d5ad1651f59a69" + resolved "https://registry.npmjs.org/compression/-/compression-1.7.2.tgz#aaffbcd6aaf854b44ebb280353d5ad1651f59a69" dependencies: accepts "~1.3.4" bytes "3.0.0" @@ -10127,9 +10127,10 @@ uglifyjs-webpack-plugin@^1.2.4: webpack-sources "^1.1.0" worker-farm "^1.5.2" -underscore@^1.9.1: - version "1.9.1" - resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.9.1.tgz#06dce34a0e68a7babc29b365b8e74b8925203961" +underscore@^1.12.1, underscore@^1.9.1: + version "1.12.1" + resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.12.1.tgz#7bb8cc9b3d397e201cf8553336d262544ead829e" + integrity sha512-hEQt0+ZLDVUMhebKxL4x1BTtDY7bavVofhZ9KZ4aI26X9SRaE+Y3m83XUL1UP2jn8ynjndwCCpEHdUG+9pP1Tw== underscore@~1.4.4: version "1.4.4"