[airflow] 03/07: Security upgrade lodash from 4.17.19 to 4.17.20 (#11095)

[ka...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

kaxilnaik pushed a commit to branch v1-10-test
in repository https://gitbox.apache.org/repos/asf/airflow.git

commit c6b5facf7d3e674ae76d805b4799775e7dc814bf
Author: Kaxil Naik <ka...@gmail.com>
AuthorDate: Wed Sep 23 10:06:28 2020 +0100

    Security upgrade lodash from 4.17.19 to 4.17.20 (#11095)
    
    Details: https://snyk.io/vuln/SNYK-JS-LODASH-590103
---
 airflow/www_rbac/package.json | 4 ++--
 airflow/www_rbac/yarn.lock    | 5 +++++
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/airflow/www_rbac/package.json b/airflow/www_rbac/package.json
index 7087a42..4141afa 100644
--- a/airflow/www_rbac/package.json
+++ b/airflow/www_rbac/package.json
@@ -47,7 +47,7 @@
     "imports-loader": "^1.1.0",
     "jquery": ">=3.4.0",
     "js-yaml": "^3.14.0",
-    "lodash": "^4.17.19",
+    "lodash": "^4.17.20",
     "mini-css-extract-plugin": "0.9.0",
     "moment-locales-webpack-plugin": "^1.2.0",
     "style-loader": "^1.2.1",
@@ -69,7 +69,7 @@
     "eonasdan-bootstrap-datetimepicker": "^4.17.47",
     "jquery": ">=3.4.0",
     "js-yaml": "^3.14.0",
-    "lodash": "^4.17.19",
+    "lodash": "^4.17.20",
     "moment-timezone": "^0.5.28",
     "nvd3": "^1.8.6",
     "url-search-params-polyfill": "^8.1.0"
diff --git a/airflow/www_rbac/yarn.lock b/airflow/www_rbac/yarn.lock
index e247a38..4550616 100644
--- a/airflow/www_rbac/yarn.lock
+++ b/airflow/www_rbac/yarn.lock
@@ -3818,6 +3818,11 @@ lodash@^4.17.13, lodash@^4.17.19:
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
   integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==
 
+lodash@^4.17.20:
+  version "4.17.20"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52"
+  integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==
+
 log-symbols@^2.2.0:
   version "2.2.0"
   resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-2.2.0.tgz#5740e1c5d6f0dfda4ad9323b5332107ef6b4c40a"