chore(deps): bump lodash from 4.17.21 to 4.17.23 across all packages

igorDykhta · igorDykhta · commit 7edd696e1d07 · 2026-04-25T04:49:01.000+03:00
Security patch for lodash - covers all workspace packages, website, and examples. Consolidates dependabot PRs #3283, #3284, #3285, #3286, #3287, #3288, #3289 plus additional packages that dependabot missed (actions, layers, table, schemas, get-started-vite).
diff --git a/examples/get-started-vite/package.json b/examples/get-started-vite/package.json
@@ -36,7 +36,7 @@
     "@math.gl/web-mercator": "^3.6.2",
     "apache-arrow": "17.0.0",
     "gl-matrix": "^3.4.3",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react-redux": "^8.0.5",
diff --git a/package.json b/package.json
@@ -266,7 +266,7 @@
     "dot-prop": "6.0.0",
     "kind-of": "6.0.3",
     "jpeg-js": "^0.4.3",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "minimist": "1.2.6",
     "node-fetch": "2.6.1",
     "tough-cookie": "4.0.0"
diff --git a/src/actions/package.json b/src/actions/package.json
@@ -42,7 +42,7 @@
     "@types/lodash": "4.17.5",
     "@types/react-redux": "^7.1.23",
     "@types/redux-actions": "^2.6.2",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "react-palm": "^3.3.8",
     "react-redux": "^8.0.5",
     "redux": "^4.2.1",
diff --git a/src/components/package.json b/src/components/package.json
@@ -90,7 +90,7 @@
     "exenv": "^1.2.2",
     "fuzzy": "^0.1.3",
     "global": "^4.3.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "mapbox-gl": "1.13.1",
     "maplibre-gl": "^3.6.2",
     "maplibregl-mapbox-request-transformer": "^0.0.2",
diff --git a/src/deckgl-layers/package.json b/src/deckgl-layers/package.json
@@ -52,7 +52,7 @@
     "@types/supercluster": "^7.1.0",
     "d3-array": "^2.8.0",
     "global": "^4.3.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "pbf": "^3.1.0",
     "supercluster": "^7.1.0",
     "viewport-mercator-project": "^6.0.0"
diff --git a/src/layers/package.json b/src/layers/package.json
@@ -73,7 +73,7 @@
     "d3-shape": "^1.2.0",
     "global": "^4.3.0",
     "keymirror": "^0.1.1",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "long": "^4.0.0",
     "markdown-to-jsx": "^7.7.6",
     "prop-types": "^15.6.0",
diff --git a/src/reducers/package.json b/src/reducers/package.json
@@ -58,7 +58,7 @@
     "d3-dsv": "^2.0.0",
     "deepmerge": "^4.2.2",
     "global": "^4.3.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "react-palm": "^3.3.8",
     "redux": "^4.2.1",
     "redux-actions": "^2.2.1",
diff --git a/src/schemas/package.json b/src/schemas/package.json
@@ -42,7 +42,7 @@
     "apache-arrow": ">=15.0.0",
     "global": "^4.3.0",
     "keymirror": "^0.1.1",
-    "lodash": "4.17.21"
+    "lodash": "4.17.23"
   },
   "nyc": {
     "sourceMap": false,
diff --git a/src/table/package.json b/src/table/package.json
@@ -40,7 +40,7 @@
     "@types/lodash": "4.17.5",
     "d3-array": "^2.8.0",
     "global": "^4.3.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "moment": "^2.10.6",
     "react-palm": "^3.3.8",
     "type-analyzer": "0.4.0"
diff --git a/src/utils/package.json b/src/utils/package.json
@@ -52,7 +52,7 @@
     "global": "^4.3.0",
     "h3-js": "^3.1.0",
     "keymirror": "^0.1.1",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "mapbox-gl": "^1.13.1",
     "maplibre-gl": "^3.6.2",
     "maplibregl-mapbox-request-transformer": "^0.0.2",
diff --git a/website/package.json b/website/package.json
@@ -19,7 +19,7 @@
   "dependencies": {
     "classnames": "^2.2.5",
     "global": "^4.3.2",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "prop-types": "^15.6.1",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
diff --git a/website/yarn.lock b/website/yarn.lock
@@ -5239,7 +5239,7 @@ __metadata:
     eslint-plugin-react: "npm:^7.13.0"
     file-loader: "npm:^1.1.11"
     global: "npm:^4.3.2"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
     prettier: "npm:1.19.1"
     prop-types: "npm:^15.6.1"
     react: "npm:^18.2.0"
@@ -5357,7 +5357,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lodash@npm:4.17.21, lodash@npm:^4.13.1, lodash@npm:^4.17.11, lodash@npm:^4.17.12, lodash@npm:^4.17.14":
+"lodash@npm:4.17.23":
+  version: 4.17.23
+  resolution: "lodash@npm:4.17.23"
+  checksum: 10c0/1264a90469f5bb95d4739c43eb6277d15b6d9e186df4ac68c3620443160fc669e2f14c11e7d8b2ccf078b81d06147c01a8ccced9aab9f9f63d50dcf8cace6bf6
+  languageName: node
+  linkType: hard
+
+"lodash@npm:^4.13.1, lodash@npm:^4.17.11, lodash@npm:^4.17.12, lodash@npm:^4.17.14":
   version: 4.17.21
   resolution: "lodash@npm:4.17.21"
   checksum: 10c0/d8cbea072bb08655bb4c989da418994b073a608dffa608b09ac04b43a791b12aeae7cd7ad919aa4c925f33b48490b5cfe6c1f71d827956071dae2e7bb3a6b74c
diff --git a/yarn.lock b/yarn.lock
@@ -4922,7 +4922,7 @@ __metadata:
     "@types/lodash": "npm:4.17.5"
     "@types/react-redux": "npm:^7.1.23"
     "@types/redux-actions": "npm:^2.6.2"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
     react-palm: "npm:^3.3.8"
     react-redux: "npm:^8.0.5"
     redux: "npm:^4.2.1"
@@ -5047,7 +5047,7 @@ __metadata:
     exenv: "npm:^1.2.2"
     fuzzy: "npm:^0.1.3"
     global: "npm:^4.3.0"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
     mapbox-gl: "npm:1.13.1"
     maplibre-gl: "npm:^3.6.2"
     maplibregl-mapbox-request-transformer: "npm:^0.0.2"
@@ -5168,7 +5168,7 @@ __metadata:
     "@types/supercluster": "npm:^7.1.0"
     d3-array: "npm:^2.8.0"
     global: "npm:^4.3.0"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
     pbf: "npm:^3.1.0"
     supercluster: "npm:^7.1.0"
     viewport-mercator-project: "npm:^6.0.0"
@@ -5259,7 +5259,7 @@ __metadata:
     d3-shape: "npm:^1.2.0"
     global: "npm:^4.3.0"
     keymirror: "npm:^0.1.1"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
     long: "npm:^4.0.0"
     markdown-to-jsx: "npm:^7.7.6"
     prop-types: "npm:^15.6.0"
@@ -5343,7 +5343,7 @@ __metadata:
     d3-dsv: "npm:^2.0.0"
     deepmerge: "npm:^4.2.2"
     global: "npm:^4.3.0"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
     react-palm: "npm:^3.3.8"
     redux: "npm:^4.2.1"
     redux-actions: "npm:^2.2.1"
@@ -5367,7 +5367,7 @@ __metadata:
     apache-arrow: "npm:>=15.0.0"
     global: "npm:^4.3.0"
     keymirror: "npm:^0.1.1"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
   languageName: unknown
   linkType: soft
 
@@ -5395,7 +5395,7 @@ __metadata:
     "@types/lodash": "npm:4.17.5"
     d3-array: "npm:^2.8.0"
     global: "npm:^4.3.0"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
     moment: "npm:^2.10.6"
     react-palm: "npm:^3.3.8"
     type-analyzer: "npm:0.4.0"
@@ -5450,7 +5450,7 @@ __metadata:
     global: "npm:^4.3.0"
     h3-js: "npm:^3.1.0"
     keymirror: "npm:^0.1.1"
-    lodash: "npm:4.17.21"
+    lodash: "npm:4.17.23"
     mapbox-gl: "npm:^1.13.1"
     maplibre-gl: "npm:^3.6.2"
     maplibregl-mapbox-request-transformer: "npm:^0.0.2"
@@ -21591,10 +21591,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lodash@npm:4.17.21":
-  version: 4.17.21
-  resolution: "lodash@npm:4.17.21"
-  checksum: 10c0/d8cbea072bb08655bb4c989da418994b073a608dffa608b09ac04b43a791b12aeae7cd7ad919aa4c925f33b48490b5cfe6c1f71d827956071dae2e7bb3a6b74c
+"lodash@npm:4.17.23":
+  version: 4.17.23
+  resolution: "lodash@npm:4.17.23"
+  checksum: 10c0/1264a90469f5bb95d4739c43eb6277d15b6d9e186df4ac68c3620443160fc669e2f14c11e7d8b2ccf078b81d06147c01a8ccced9aab9f9f63d50dcf8cace6bf6
   languageName: node
   linkType: hard
 
