deps(deps): bump the everything group across 1 directory with 9 updates by dependabot[bot] · Pull Request #17136 · GoogleChrome/lighthouse

dependabot · 2026-07-19T12:06:09Z

Bumps the everything group with 9 updates in the / directory:

Package	From	To
@sentry/node	`10.58.0`	`10.65.0`
configstore	`7.0.0`	`7.1.0`
enquirer	`2.3.6`	`2.4.1`
http-link-header	`1.1.1`	`1.1.3`
intl-messageformat	`10.5.3`	`10.7.18`
lodash-es	`4.17.21`	`4.18.1`
open	`8.4.0`	`8.4.2`
ws	`7.4.6`	`7.5.11`
yargs	`17.7.1`	`17.7.3`

Updates @sentry/node from 10.58.0 to 10.65.0

Release notes

Sourced from @sentry/node's releases.

10.65.0

feat(angular): Set url attributes on pageload and navigation spans (#21985)

feat(astro): Set url.template on pageload spans (#22011)

feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)

feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)

feat(bun): warn when externalizing instrumented deps (#21999)

feat(core): Require attributes on SerializedStreamedSpan (#22052)

feat(ember): Set url.template, url.path and url.full on router spans (#22095)

feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)

feat(nextjs): Set url attributes on pageload and navigation spans (#22006)

feat(react): Set url.template, url.path and url.full on routing spans (#22087)

feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)

feat(remix): Set url.template on pageload and navigation spans (#22025)

feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)

feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)

feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)

feat(server-utils): Implement orchestrion-based express integration (#21889)

feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)

feat(solid): Set url attributes on solid router and tanstack router spans (#22090)

feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)

feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)

fix(browser): Send web vital span sentry.segment.name attribute (#22024)

fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)

fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)

fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)

fix(replay): Skip client reports for replay failures after stop (#22177)

perf(vite): add fast component annotation transform (#22089)

ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)

chore: Add external contributor to CHANGELOG.md (#22111)

chore: Reinstate changelog anchor (#22022)

chore(cloudflare): Ignore import patterns (#22008)

chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)

chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)

chore(opentelemetry): Add worker as export | sort exports (#21859)

chore(size-limit): weekly auto-bump (#21812)

ci: Only run cloudflare & bundler plugin tests when necessary (#22130)

ci(deps): bump actions/checkout from 6 to 7 (#21898)

ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)

ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)

ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)

ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)

feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)

feat(core): add uniq array util and consolidate call sites (#22152)

feat(deps): Bump @growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)

feat(deps): Bump @opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)

feat(deps): Bump dotenv from 16.0.3 to 17.4.2 (#22150)

... (truncated)

Changelog

Sourced from @sentry/node's changelog.

10.65.0

feat(angular): Set url attributes on pageload and navigation spans (#21985)

feat(astro): Set url.template on pageload spans (#22011)

feat(aws-serverless): Replace OTel Lambda instrumentation with handler redirection (#22079)

feat(browser): Set url.path and url.full on pageload and navigation spans (#21952)

feat(bun): warn when externalizing instrumented deps (#21999)

feat(core): Require attributes on SerializedStreamedSpan (#22052)

feat(ember): Set url.template, url.path and url.full on router spans (#22095)

feat(mysql2): Instrument mysql2 >= 3.20.0 via native tracing channels (#21824)

feat(nextjs): Set url attributes on pageload and navigation spans (#22006)

feat(react): Set url.template, url.path and url.full on routing spans (#22087)

feat(react-router): Set url.template, url.path and url.full on pageload and navigation spans (#22018)

feat(remix): Set url.template on pageload and navigation spans (#22025)

feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)

feat(server-utils): Add requiresParentSpan option to bindTracingChannelToSpan (#22113)

feat(server-utils): Capture usage and output on streamed Vercel AI v7 spans (#22000)

feat(server-utils): Implement orchestrion-based express integration (#21889)

feat(server-utils): Instrument graphql v17 via native tracing channels (#21804)

feat(solid): Set url attributes on solid router and tanstack router spans (#22090)

feat(sveltekit): Set url.template, url.path and url.full on pageload and navigation spans (#22027)

feat(vue, nuxt): Set url.template and URL attributes on router spans (#22063)

fix(browser): Send web vital span sentry.segment.name attribute (#22024)

fix(cloudflare): Honor newTarget in instrumentDurableObjectWithSentry construct trap (#22104)

fix(opentelemetry): Fall back to 'sentry.origin': manual when backfilling OTel data (#22102)

fix(replay): Prevent rrweb recording from dying when the emit callback throws (#21409)

fix(replay): Skip client reports for replay failures after stop (#22177)

perf(vite): add fast component annotation transform (#22089)

ref(server-utils): Add orchestrion support for Vercel AI v5 (#21979)

chore: Add external contributor to CHANGELOG.md (#22111)

chore: Reinstate changelog anchor (#22022)

chore(cloudflare): Ignore import patterns (#22008)

chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in /dev-packages/e2e-tests/test-applications/tanstackstart-react-orchestrion (#22041)

chore(deps): bump vite from 8.0.1 to 8.0.16 in /dev-packages/bundler-plugin-integration-tests/fixtures/vite8 (#21664)

chore(opentelemetry): Add worker as export | sort exports (#21859)

chore(size-limit): weekly auto-bump (#21812)

ci: Only run cloudflare & bundler plugin tests when necessary (#22130)

ci(deps): bump actions/checkout from 6 to 7 (#21898)

ci(deps): Bump anthropics/claude-code-action from 1.0.124 to 1.0.161 (#21896)

ci(deps): Bump getsentry/craft from 2.26.9 to 2.26.14 (#21900)

ci(deps): Bump getsentry/github-workflows/validate-pr from 71588ddf95134f804e82c5970a8098588e2eaecd to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 (#21897)

ci(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 (#21899)

feat(core): add isObjectLike guard and consolidate non-null-object checks (#22155)

feat(core): add uniq array util and consolidate call sites (#22152)

feat(deps): Bump @growthbook/growthbook from 1.6.1 to 1.6.5 (#21940)

feat(deps): Bump @opentelemetry/semantic-conventions from 1.41.1 to 1.42.0 in the opentelemetry group (#22147)

... (truncated)

Commits

c66a815 release: 10.65.0
018c570 Merge pull request #22179 from getsentry/prepare-release/10.65.0
5a1e331 meta(changelog): Update changelog for 10.65.0
e934b44 feat(server-utils): Add orchestrion support for Vercel AI v4 (#22139)
04bbb79 fix(replay): Skip client reports for replay failures after stop (#22177)
cb77f42 test: Remove fixed container_name from node integration test docker-compose f...
a84cc9d test(node-integration-tests): Surface early scenario exit instead of hanging ...
88e3b32 feat(core): add isObjectLike guard and consolidate non-null-object checks (#2...
7565c90 ref(nitro, nuxt): inline == null checks for nullish detection (#22154)
256b9b9 feat(ember): Set url.template, url.path and url.full on router spans (#22095)
Additional commits viewable in compare view

Updates configstore from 7.0.0 to 7.1.0

Release notes

Sourced from configstore's releases.

v7.1.0

Add clearInvalidConfig option af24eac

sindresorhus/configstore@v7.0.0...v7.1.0

Commits

a5ec042 7.1.0
af24eac Add clearInvalidConfig option
b14e818 Update link
See full diff in compare view

Updates enquirer from 2.3.6 to 2.4.1

Changelog

Sourced from enquirer's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changelogs are for humans, not machines.

There should be an entry for every single version.

The same types of changes should be grouped.

Versions and sections should be linkable.

The latest version comes first.

The release date of each versions is displayed.

Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

Added for new features.

Changed for changes in existing functionality.

Deprecated for soon-to-be removed features.

Removed for now removed features.

Fixed for any bug fixes.

Security in case of vulnerabilities.

Commits

See full diff in compare view

Updates http-link-header from 1.1.1 to 1.1.3

Commits

See full diff in compare view

Updates intl-messageformat from 10.5.3 to 10.7.18

Commits

8c196f3 build: publish
fe0dd85 fix: add a comment just to bump patch version
3a192d4 build: publish
3cf9083 build(deps): bump form-data and @parcel/config-default in /packages/react-int...
e392fba chore(deps): update io_buildbuddy_buildbuddy_toolchain digest to 722cf8f (#5125)
cfa2707 chore: Lerna-Lite --skip-bump-only-releases (#5124)
c7bc7c7 chore(deps): update babel monorepo to v7.28.4 (#5115)
e8b5a0e build: publish
e55618d chore: tooling
e1b954c chore: update lock
Additional commits viewable in compare view

Updates lodash-es from 4.17.21 to 4.18.1

Release notes

Sourced from lodash-es's releases.

4.18.1

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

lodash: lodash/lodash@4.18.0-npm...4.18.1-npm

lodash-es: lodash/lodash@4.18.0-es...4.18.1-es

lodash-amd: lodash/lodash@4.18.0-amd...4.18.1-amd

lodash.templatelodash/lodash@4.18.0-npm-packages...4.18.1-npm-packages

4.18.0

v4.18.0

Full Changelog: lodash/lodash@4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, 879aaa9). Fixes an incomplete patch for CVE-2021-23337. The variable option was validated against reForbiddenIdentifierChars but importsKeys was left unguarded, allowing code injection via the same Function() constructor sink. imports keys containing forbidden identifier characters now throw "Invalid imports option passed into _.template".

Docs

Add security notice for _.template in threat model and API docs (#6099)

Document lower > upper behavior in _.random (#6115)

Fix quotes in _.compact jsdoc (#6090)

lodash.* modular packages

Diff

We have also regenerated and published a select number of the lodash.* modular packages.

These modular packages had fallen out of sync significantly from the minor/patch updates to lodash. Specifically, we have brought the following packages up to parity w/ the latest lodash release because they have had CVEs on them in the past:

lodash.orderby

lodash.tonumber

lodash.trim

lodash.trimend

lodash.sortedindexby

lodash.zipobjectdeep

lodash.unset

lodash.omit

lodash.template

Commits

cb0b9b9 release(patch): bump main to 4.18.1 (#6177)
75535f5 chore: prune stale advisory refs (#6170)
62e91bc docs: remove n_ Node.js < 6 REPL note from README (#6165)
59be2de release(minor): bump to 4.18.0 (#6161)
af63457 fix: broken tests for _.template 879aaa9
1073a76 fix: linting issues
879aaa9 fix: validate imports keys in _.template
fe8d32e fix: block prototype pollution in baseUnset via constructor/prototype traversal
18ba0a3 refactor(fromPairs): use baseAssignValue for consistent assignment (#6153)
b819080 ci: add dist sync validation workflow (#6137)
Additional commits viewable in compare view

Updates open from 8.4.0 to 8.4.2

Release notes

Sourced from open's releases.

v8.4.2

Fix support for Podman 51fae87

sindresorhus/open@v8.4.1...v8.4.2

v8.4.1

Fix allowNonzeroExitCode option (#296) 051edca

Fix the app argument with WSL (#295) 4cf1a6d

sindresorhus/open@v8.4.0...v8.4.1

Commits

cbc008b 8.4.2
51fae87 Fix support for Podman
27e4e3a 8.4.1
13a800c Meta tweaks
051edca Fix allowNonzeroExitCode option (#296)
4cf1a6d Fix the app argument with WSL (#295)
05ba9e1 Meta tweaks
See full diff in compare view

Updates ws from 7.4.6 to 7.5.11

Release notes

Sourced from ws's releases.

7.5.11

Bug fixes

Backported 2b2abd45 to the 7.x release line (e14c4586).

7.5.10

Bug fixes

Backported e55e5106 to the 7.x release line (22c28763).

7.5.9

Bug fixes

Backported bc8bd34e to the 7.x release line (0435e6e1).

7.5.8

Bug fixes

Backported 0fdcc0af to the 7.x release line (2758ed35).

Backported d68ba9e1 to the 7.x release line (dc1781bc).

7.5.7

Bug fixes

Backported 6946f5fe to the 7.x release line (1f72e2e1).

7.5.6

Bug fixes

Backported b8186dd1 to the 7.x release line (73dec34b).

Backported ed2b8039 to the 7.x release line (22a26afb).

7.5.5

Bug fixes

Backported ec9377ca to the 7.x release line (0e274acd).

7.5.4

Bug fixes

Backported 6a72da3e to the 7.x release line (76087fbf).

Backported 869c9892 to the 7.x release line (27997933).

7.5.3

Bug fixes

The WebSocketServer constructor now throws an error if more than one of the noServer, server, and port options are specefied (66e58d27).

Fixed a bug where a 'close' event was emitted by a WebSocketServer before the internal HTTP/S server was actually closed (5a587304).

... (truncated)

Commits

fd36cd8 [dist] 7.5.11
e14c458 [security] Limit retained message parts
d962d70 [dist] 7.5.10
22c2876 [security] Fix crash when the Upgrade header cannot be read (#2231)
8a78f87 [dist] 7.5.9
0435e6e [security] Fix same host check for ws+unix: redirects
4271f07 [dist] 7.5.8
dc1781b [security] Drop sensitive headers when following insecure redirects
2758ed3 [fix] Abort the handshake if the Upgrade header is invalid
a370613 [dist] 7.5.7
Additional commits viewable in compare view

Updates yargs from 17.7.1 to 17.7.3

Changelog

Sourced from yargs's changelog.

17.7.3 (2026-06-19)

Bug Fixes

fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)

18.0.0 (2025-05-26)

⚠ BREAKING CHANGES

command names are not derived from modules passed to command.

singleton usage of yargs yargs.foo, yargs().argv, has been removed.

minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23.

yargs is now ESM first

Features

commandDir now works with ESM files (#2461) (27eec18)

locale: adds hebrew translation (#2357) (4266485)

yargs is now ESM first (d90af45)

zsh: Add default completion as fallback (#2331) (e02c91b)

Bug Fixes

addDirectory do not support absolute command dir (#2465) (3a40a78)

allows ESM modules commands to be extensible using visit option (#2468) (200e1aa)

browser: fix shims so that yargs continues working in browser context (#2457) (4ae5f57)

build: address problems with typescript compilation (#2445) (8d72fb3)

coerce should play well with parser configuration (#2308) (8343c66)

deps: update dependency yargs-parser to v22 (#2470) (639130d)

exit after async handler done (#2313) (e326cde)

handle spaces in bash completion (#2452) (83b7788)

parser-configuration should work well with generated completion script (#2332) (888db19)

propagate Dictionary including undefined in value type (#2393) (2b2f7f5)

zsh: completion no longer requires double tab when using autoloaded (0dd8fe4)

Code Refactoring

command names are not derived from modules passed to command. (d90af45)

singleton usage of yargs yargs.foo, yargs().argv, has been removed. (d90af45)

... (truncated)

Commits

2f7df4d chore: bump version for release
caf8440 chore: bump version for prerelease
c7597e3 fix: use entry point with file extension for anything that supports exports (...
3566b84 chore(main): release 17.7.2 (#2323)
7f42848 fix: do not crash completion when having negated options (#2322)
See full diff in compare view

Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.

Bumps the everything group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.58.0` | `10.65.0` | | [configstore](https://github.com/sindresorhus/configstore) | `7.0.0` | `7.1.0` | | [enquirer](https://github.com/enquirer/enquirer) | `2.3.6` | `2.4.1` | | [http-link-header](https://github.com/jhermsmeier/node-http-link-header) | `1.1.1` | `1.1.3` | | [intl-messageformat](https://github.com/formatjs/formatjs) | `10.5.3` | `10.7.18` | | [lodash-es](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | | [open](https://github.com/sindresorhus/open) | `8.4.0` | `8.4.2` | | [ws](https://github.com/websockets/ws) | `7.4.6` | `7.5.11` | | [yargs](https://github.com/yargs/yargs) | `17.7.1` | `17.7.3` | Updates `@sentry/node` from 10.58.0 to 10.65.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](getsentry/sentry-javascript@10.58.0...10.65.0) Updates `configstore` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/sindresorhus/configstore/releases) - [Commits](sindresorhus/configstore@v7.0.0...v7.1.0) Updates `enquirer` from 2.3.6 to 2.4.1 - [Changelog](https://github.com/enquirer/enquirer/blob/master/CHANGELOG.md) - [Commits](https://github.com/enquirer/enquirer/commits) Updates `http-link-header` from 1.1.1 to 1.1.3 - [Commits](https://github.com/jhermsmeier/node-http-link-header/commits) Updates `intl-messageformat` from 10.5.3 to 10.7.18 - [Release notes](https://github.com/formatjs/formatjs/releases) - [Commits](https://github.com/formatjs/formatjs/compare/intl-messageformat@10.5.3...intl-messageformat@10.7.18) Updates `lodash-es` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `open` from 8.4.0 to 8.4.2 - [Release notes](https://github.com/sindresorhus/open/releases) - [Commits](sindresorhus/open@v8.4.0...v8.4.2) Updates `ws` from 7.4.6 to 7.5.11 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@7.4.6...7.5.11) Updates `yargs` from 17.7.1 to 17.7.3 - [Release notes](https://github.com/yargs/yargs/releases) - [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md) - [Commits](yargs/yargs@v17.7.1...v17.7.3) --- updated-dependencies: - dependency-name: "@sentry/node" dependency-version: 10.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: configstore dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: enquirer dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: http-link-header dependency-version: 1.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: intl-messageformat dependency-version: 10.7.18 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: lodash-es dependency-version: 4.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: open dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: ws dependency-version: 7.5.11 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: yargs dependency-version: 17.7.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 19, 2026

dependabot Bot requested a review from a team as a code owner July 19, 2026 12:06

dependabot Bot requested review from paulirish and removed request for a team July 19, 2026 12:06

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 19, 2026

vercel Bot deployed to Preview July 19, 2026 12:07 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/everything-e306052241 branch from 0834186 to 272c35c Compare July 26, 2026 12:05

vercel Bot deployed to Preview July 26, 2026 12:07 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps(deps): bump the everything group across 1 directory with 9 updates - #17136

deps(deps): bump the everything group across 1 directory with 9 updates#17136
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/everything-e306052241

dependabot Bot commented on behalf of github Jul 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.65.0

10.65.0

v7.1.0

Release history

4.18.1

Bugs

4.18.0

v4.18.0

Security

Docs

lodash.* modular packages

v8.4.2

v8.4.1

7.5.11

Bug fixes

7.5.10

Bug fixes

7.5.9

Bug fixes

7.5.8

Bug fixes

7.5.7

Bug fixes

7.5.6

Bug fixes

7.5.5

Bug fixes

7.5.4

Bug fixes

7.5.3

Bug fixes

17.7.3 (2026-06-19)

Bug Fixes

16.2.2 (2026-06-19)

Bug Fixes

18.0.0 (2025-05-26)

⚠ BREAKING CHANGES

Features

Bug Fixes

Code Refactoring

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 19, 2026 •

edited

Loading

`lodash.*` modular packages