Skip to content

[Onyx] - Updated lodash dependency to fix vulnerability#53

Merged
bondydaa merged 1 commit into
masterfrom
luke-update-lodash-dependency
Mar 19, 2021
Merged

[Onyx] - Updated lodash dependency to fix vulnerability#53
bondydaa merged 1 commit into
masterfrom
luke-update-lodash-dependency

Conversation

@Luke9389

@Luke9389 Luke9389 commented Mar 19, 2021

Copy link
Copy Markdown
Contributor

cc @tgolen

Details

Rather than using individual packages for each lodash method, we are using the main lodash package and selectively loading the methods we need (using this handy syntax: lodash/merge)

Fixed Issues

Fixes https://github.com/Expensify/Expensify/issues/157899

Web QA

Just regular regression testing will suffice for this. No special tests are needed. Thanks!

@Luke9389 Luke9389 self-assigned this Mar 19, 2021
@Luke9389 Luke9389 requested a review from a team as a code owner March 19, 2021 21:30
@botify botify requested review from bondydaa and removed request for a team March 19, 2021 21:30
@Luke9389 Luke9389 changed the title swapped lodash.merge for lodash/merge Updated lodash dependency to fix vulnerability Mar 19, 2021
@Luke9389 Luke9389 changed the title Updated lodash dependency to fix vulnerability [Onyx] - Updated lodash dependency to fix vulnerability Mar 19, 2021

@bondydaa bondydaa left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you add a QA section that states regular regressions are all that are needed, no special tests.

@bondydaa bondydaa merged commit bd59626 into master Mar 19, 2021
@bondydaa bondydaa deleted the luke-update-lodash-dependency branch March 19, 2021 21:41
@github-actions github-actions Bot locked and limited conversation to collaborators Mar 19, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants