Skip to content

Update lodash to >= v4.17.23#470

Open
celdrake wants to merge 1 commit intoflightctl:mainfrom
celdrake:lodash-update
Open

Update lodash to >= v4.17.23#470
celdrake wants to merge 1 commit intoflightctl:mainfrom
celdrake:lodash-update

Conversation

@celdrake
Copy link
Collaborator

@celdrake celdrake commented Feb 3, 2026

Related to https://github.com/flightctl/flightctl-ui/security/dependabot/67 and https://github.com/flightctl/flightctl-ui/security/dependabot/68

npm list lodash/lodash-es shows all packages use 4.17.23

Summary by CodeRabbit

  • Chores
    • Updated and added core utility library dependencies to their latest stable versions. These updates deliver enhanced security features, improved application performance and responsiveness, better overall reliability and stability, and full compatibility with modern development standards, while maintaining complete backward compatibility with existing code and preserving all functionality.

@coderabbitai
Copy link

coderabbitai bot commented Feb 3, 2026

Walkthrough

Updated lodash dependency from version 4.17.21 to 4.17.23 and added lodash-es dependency with version 4.17.23 to package.json.

Changes

Cohort / File(s) Summary
Dependency Updates
package.json
Updated lodash from ^4.17.21 to ^4.17.23 and added new lodash-es dependency with version ^4.17.23.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title 'Update lodash to >= v4.17.23' directly and clearly describes the main change: updating the lodash dependency to version 4.17.23 or greater, which aligns perfectly with the changeset showing lodash updated from ^4.17.21 to ^4.17.23.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Fix all issues with AI agents
In `@package.json`:
- Line 53: Remove the redundant direct dependency "lodash-es" from package.json
(it is provided transitively by formik and your code imports CommonJS "lodash"
not "lodash-es"); delete the "lodash-es" entry, update the lockfile by running
the package manager install (npm install / yarn install / pnpm install) and
rebuild, and verify no imports/reference in codebase rely on "lodash-es"
(confirm package name usage in imports and adjust to "lodash" if needed) to
avoid duplicate mismatched versions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant