From 253da8fcb9a77286c3fbeb0fdf99b7d3c563f2f0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 24 Jan 2026 01:32:07 +0000 Subject: [PATCH 01/11] Bump lodash from 4.17.20 to 4.17.23 in /javascript Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.20...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- javascript/package-lock.json | 43 ++++++++++++++++++++++++------------ javascript/package.json | 2 +- javascript/yarn.lock | 8 +++---- 3 files changed, 34 insertions(+), 19 deletions(-) diff --git a/javascript/package-lock.json b/javascript/package-lock.json index 5ff3feb2e3..6d1bf74356 100644 --- a/javascript/package-lock.json +++ b/javascript/package-lock.json @@ -1,43 +1,58 @@ { "name": "javascript", "version": "1.0.0", - "lockfileVersion": 1, + "lockfileVersion": 3, "requires": true, - "dependencies": { - "@handsontable/formulajs": { + "packages": { + "": { + "version": "1.0.0", + "license": "MIT", + "dependencies": { + "hot-formula-parser": "^3.0.0", + "lodash": "^4.17.23" + } + }, + "node_modules/@handsontable/formulajs": { "version": "2.0.2", "resolved": "https://registry.npmjs.org/@handsontable/formulajs/-/formulajs-2.0.2.tgz", "integrity": "sha512-maIyMJtYjA5e/R9nyA22Qd7Yw73MBSxClJvle0a8XWAS/5l6shc/OFpQqrmwMy4IXUCmywJ9ER0gOGz/YA720w==", - "requires": { + "dependencies": { "bessel": "^1.0.2", "jstat": "^1.9.2" + }, + "bin": { + "implementation-stats": "bin/implementation-stats" } }, - "bessel": { + "node_modules/bessel": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/bessel/-/bessel-1.0.2.tgz", - "integrity": "sha512-Al3nHGQGqDYqqinXhQzmwmcRToe/3WyBv4N8aZc5Pef8xw2neZlR9VPi84Sa23JtgWcucu18HxVZrnI0fn2etw==" + "integrity": "sha512-Al3nHGQGqDYqqinXhQzmwmcRToe/3WyBv4N8aZc5Pef8xw2neZlR9VPi84Sa23JtgWcucu18HxVZrnI0fn2etw==", + "engines": { + "node": ">=0.8" + } }, - "hot-formula-parser": { + "node_modules/hot-formula-parser": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/hot-formula-parser/-/hot-formula-parser-3.0.0.tgz", "integrity": "sha512-CHLTrsrv29it5XPcHalNO8ClcJGHefwf599MePlG5dYzxxtbPqx/qt8CkrqvxQeNA5XtkAUcxU62OFv0z2L49A==", - "requires": { + "dependencies": { "@handsontable/formulajs": "^2.0.0", "tiny-emitter": "^2.0.1" } }, - "jstat": { + "node_modules/jstat": { "version": "1.9.3", "resolved": "https://registry.npmjs.org/jstat/-/jstat-1.9.3.tgz", "integrity": "sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA==" }, - "lodash": { - "version": "4.17.20", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", - "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==" + "node_modules/lodash": { + "version": "4.17.23", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz", + "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==", + "license": "MIT" }, - "tiny-emitter": { + "node_modules/tiny-emitter": { "version": "2.1.0", "resolved": "https://registry.npmjs.org/tiny-emitter/-/tiny-emitter-2.1.0.tgz", "integrity": "sha512-NB6Dk1A9xgQPMoGqC5CVXn123gWyte215ONT5Pp5a0yt4nlEoO1ZWeCwpncaekPHXO60i47ihFnZPiRPjRMq4Q==" diff --git a/javascript/package.json b/javascript/package.json index 6c78dc8fb2..2c3396a765 100644 --- a/javascript/package.json +++ b/javascript/package.json @@ -5,6 +5,6 @@ "license": "MIT", "dependencies": { "hot-formula-parser": "^3.0.0", - "lodash": "^4.17.20" + "lodash": "^4.17.23" } } diff --git a/javascript/yarn.lock b/javascript/yarn.lock index fd3e47b734..3660e870a9 100644 --- a/javascript/yarn.lock +++ b/javascript/yarn.lock @@ -28,10 +28,10 @@ jstat@^1.9.2: resolved "https://registry.yarnpkg.com/jstat/-/jstat-1.9.3.tgz#6a0e60c3b87fd714b61e765b77fc6b035437ee34" integrity sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA== -lodash@^4.17.20: - version "4.17.20" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52" - integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA== +lodash@^4.17.23: + version "4.17.23" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a" + integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w== tiny-emitter@^2.1.0: version "2.1.0" From 8c1a61c017727729427bd03c6f2f0829cd69d85c Mon Sep 17 00:00:00 2001 From: gaurav58001 <83457171+gaurav58001@users.noreply.github.com> Date: Sun, 9 Aug 2026 01:20:17 +0530 Subject: [PATCH 02/11] Create dependency-review.yml --- .github/workflows/dependency-review.yml | 39 +++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 .github/workflows/dependency-review.yml diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000000..d19e21b798 --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,39 @@ +# Dependency Review Action +# +# This Action will scan dependency manifest files that change as part of a Pull Request, +# surfacing known-vulnerable versions of the packages declared or updated in the PR. +# Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable +# packages will be blocked from merging. +# +# Source repository: https://github.com/actions/dependency-review-action +# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement +name: 'Dependency review' +on: + pull_request: + branches: [ "main" ] + +# If using a dependency submission action in this workflow this permission will need to be set to: +# +# permissions: +# contents: write +# +# https://docs.github.com/en/enterprise-cloud@latest/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api +permissions: + contents: read + # Write permissions for pull-requests are required for using the `comment-summary-in-pr` option, comment out if you aren't using this option + pull-requests: write + +jobs: + dependency-review: + runs-on: ubuntu-latest + steps: + - name: 'Checkout repository' + uses: actions/checkout@v4 + - name: 'Dependency Review' + uses: actions/dependency-review-action@v4 + # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options. + with: + comment-summary-in-pr: always + # fail-on-severity: moderate + # deny-licenses: GPL-1.0-or-later, LGPL-2.0-or-later + # retry-on-snapshot-warnings: true From e003fa911e30e2f4e4e984aa03234b6ce6577d38 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 8 Aug 2026 19:53:24 +0000 Subject: [PATCH 03/11] Bump lodash from 4.17.20 to 4.18.1 in /javascript Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.18.1. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.20...4.18.1) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.18.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- javascript/package-lock.json | 43 ++++++++++++++++++++++++------------ javascript/package.json | 2 +- javascript/yarn.lock | 8 +++---- 3 files changed, 34 insertions(+), 19 deletions(-) diff --git a/javascript/package-lock.json b/javascript/package-lock.json index 5ff3feb2e3..6fc0d5317e 100644 --- a/javascript/package-lock.json +++ b/javascript/package-lock.json @@ -1,43 +1,58 @@ { "name": "javascript", "version": "1.0.0", - "lockfileVersion": 1, + "lockfileVersion": 3, "requires": true, - "dependencies": { - "@handsontable/formulajs": { + "packages": { + "": { + "version": "1.0.0", + "license": "MIT", + "dependencies": { + "hot-formula-parser": "^3.0.0", + "lodash": "^4.18.1" + } + }, + "node_modules/@handsontable/formulajs": { "version": "2.0.2", "resolved": "https://registry.npmjs.org/@handsontable/formulajs/-/formulajs-2.0.2.tgz", "integrity": "sha512-maIyMJtYjA5e/R9nyA22Qd7Yw73MBSxClJvle0a8XWAS/5l6shc/OFpQqrmwMy4IXUCmywJ9ER0gOGz/YA720w==", - "requires": { + "dependencies": { "bessel": "^1.0.2", "jstat": "^1.9.2" + }, + "bin": { + "implementation-stats": "bin/implementation-stats" } }, - "bessel": { + "node_modules/bessel": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/bessel/-/bessel-1.0.2.tgz", - "integrity": "sha512-Al3nHGQGqDYqqinXhQzmwmcRToe/3WyBv4N8aZc5Pef8xw2neZlR9VPi84Sa23JtgWcucu18HxVZrnI0fn2etw==" + "integrity": "sha512-Al3nHGQGqDYqqinXhQzmwmcRToe/3WyBv4N8aZc5Pef8xw2neZlR9VPi84Sa23JtgWcucu18HxVZrnI0fn2etw==", + "engines": { + "node": ">=0.8" + } }, - "hot-formula-parser": { + "node_modules/hot-formula-parser": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/hot-formula-parser/-/hot-formula-parser-3.0.0.tgz", "integrity": "sha512-CHLTrsrv29it5XPcHalNO8ClcJGHefwf599MePlG5dYzxxtbPqx/qt8CkrqvxQeNA5XtkAUcxU62OFv0z2L49A==", - "requires": { + "dependencies": { "@handsontable/formulajs": "^2.0.0", "tiny-emitter": "^2.0.1" } }, - "jstat": { + "node_modules/jstat": { "version": "1.9.3", "resolved": "https://registry.npmjs.org/jstat/-/jstat-1.9.3.tgz", "integrity": "sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA==" }, - "lodash": { - "version": "4.17.20", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", - "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA==" + "node_modules/lodash": { + "version": "4.18.1", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz", + "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==", + "license": "MIT" }, - "tiny-emitter": { + "node_modules/tiny-emitter": { "version": "2.1.0", "resolved": "https://registry.npmjs.org/tiny-emitter/-/tiny-emitter-2.1.0.tgz", "integrity": "sha512-NB6Dk1A9xgQPMoGqC5CVXn123gWyte215ONT5Pp5a0yt4nlEoO1ZWeCwpncaekPHXO60i47ihFnZPiRPjRMq4Q==" diff --git a/javascript/package.json b/javascript/package.json index 6c78dc8fb2..330927739e 100644 --- a/javascript/package.json +++ b/javascript/package.json @@ -5,6 +5,6 @@ "license": "MIT", "dependencies": { "hot-formula-parser": "^3.0.0", - "lodash": "^4.17.20" + "lodash": "^4.18.1" } } diff --git a/javascript/yarn.lock b/javascript/yarn.lock index fd3e47b734..6867cd1418 100644 --- a/javascript/yarn.lock +++ b/javascript/yarn.lock @@ -28,10 +28,10 @@ jstat@^1.9.2: resolved "https://registry.yarnpkg.com/jstat/-/jstat-1.9.3.tgz#6a0e60c3b87fd714b61e765b77fc6b035437ee34" integrity sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA== -lodash@^4.17.20: - version "4.17.20" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.20.tgz#b44a9b6297bcb698f1c51a3545a2b3b368d59c52" - integrity sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA== +lodash@^4.18.1: + version "4.18.1" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c" + integrity sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q== tiny-emitter@^2.1.0: version "2.1.0" From 497c9a795d7400a95614d1787083230d90ef9714 Mon Sep 17 00:00:00 2001 From: gaurav58001 <83457171+gaurav58001@users.noreply.github.com> Date: Sun, 9 Aug 2026 01:29:56 +0530 Subject: [PATCH 04/11] Update package.json --- javascript/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/javascript/package.json b/javascript/package.json index 2c3396a765..6c78dc8fb2 100644 --- a/javascript/package.json +++ b/javascript/package.json @@ -5,6 +5,6 @@ "license": "MIT", "dependencies": { "hot-formula-parser": "^3.0.0", - "lodash": "^4.17.23" + "lodash": "^4.17.20" } } From 999ede3599dbaf6b4b3789670236a144b7fcb803 Mon Sep 17 00:00:00 2001 From: gaurav58001 <83457171+gaurav58001@users.noreply.github.com> Date: Sun, 9 Aug 2026 01:33:38 +0530 Subject: [PATCH 05/11] Update package-lock.json --- javascript/package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/javascript/package-lock.json b/javascript/package-lock.json index 6d1bf74356..052af36a53 100644 --- a/javascript/package-lock.json +++ b/javascript/package-lock.json @@ -9,7 +9,7 @@ "license": "MIT", "dependencies": { "hot-formula-parser": "^3.0.0", - "lodash": "^4.17.23" + "lodash": "^4.17.21" } }, "node_modules/@handsontable/formulajs": { @@ -47,8 +47,8 @@ "integrity": "sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA==" }, "node_modules/lodash": { - "version": "4.17.23", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz", + "version": "4.17.21", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==", "license": "MIT" }, From 10fa68ce36209daaaba27f5ea3a616ef6eeb001d Mon Sep 17 00:00:00 2001 From: gaurav58001 <83457171+gaurav58001@users.noreply.github.com> Date: Sun, 9 Aug 2026 01:34:29 +0530 Subject: [PATCH 06/11] Update yarn.lock --- javascript/yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/javascript/yarn.lock b/javascript/yarn.lock index 3660e870a9..0a502f585c 100644 --- a/javascript/yarn.lock +++ b/javascript/yarn.lock @@ -28,9 +28,9 @@ jstat@^1.9.2: resolved "https://registry.yarnpkg.com/jstat/-/jstat-1.9.3.tgz#6a0e60c3b87fd714b61e765b77fc6b035437ee34" integrity sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA== -lodash@^4.17.23: - version "4.17.23" - resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a" +lodash@^4.17.21: + version "4.17.21" + resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a" integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w== tiny-emitter@^2.1.0: From 93b9eb7f6dbb6a89206d19ffc7937d89498b263d Mon Sep 17 00:00:00 2001 From: gaurav58001 <83457171+gaurav58001@users.noreply.github.com> Date: Sun, 9 Aug 2026 02:21:34 +0530 Subject: [PATCH 07/11] Update package-lock.json --- javascript/package-lock.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/javascript/package-lock.json b/javascript/package-lock.json index 052af36a53..6603f12c50 100644 --- a/javascript/package-lock.json +++ b/javascript/package-lock.json @@ -47,8 +47,8 @@ "integrity": "sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA==" }, "node_modules/lodash": { - "version": "4.17.21", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", + "version": "4.17.20", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==", "license": "MIT" }, From 7edfb322d1c3729b86a8216eae6f91f5fbfde7a6 Mon Sep 17 00:00:00 2001 From: gaurav58001 <83457171+gaurav58001@users.noreply.github.com> Date: Sun, 9 Aug 2026 02:28:47 +0530 Subject: [PATCH 08/11] Update package-lock.json --- javascript/package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/javascript/package-lock.json b/javascript/package-lock.json index 6603f12c50..e59063a1ce 100644 --- a/javascript/package-lock.json +++ b/javascript/package-lock.json @@ -47,7 +47,7 @@ "integrity": "sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA==" }, "node_modules/lodash": { - "version": "4.17.20", + "version": "4.17.23", "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==", "license": "MIT" From 16ff437f6aea59d2c8ff74c02d0b3a6411022225 Mon Sep 17 00:00:00 2001 From: gaurav58001 <83457171+gaurav58001@users.noreply.github.com> Date: Sun, 9 Aug 2026 02:31:08 +0530 Subject: [PATCH 09/11] Update package-lock.json --- javascript/package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/javascript/package-lock.json b/javascript/package-lock.json index e59063a1ce..e8a9ca8819 100644 --- a/javascript/package-lock.json +++ b/javascript/package-lock.json @@ -47,7 +47,7 @@ "integrity": "sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA==" }, "node_modules/lodash": { - "version": "4.17.23", + "version": "4.18.00", "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz", "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==", "license": "MIT" From c540161640632ce36954a9d46896b34bbccff0c7 Mon Sep 17 00:00:00 2001 From: gaurav58001 <83457171+gaurav58001@users.noreply.github.com> Date: Sun, 9 Aug 2026 02:36:46 +0530 Subject: [PATCH 10/11] Update yarn.lock --- javascript/yarn.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/javascript/yarn.lock b/javascript/yarn.lock index 0a502f585c..4c8ed67743 100644 --- a/javascript/yarn.lock +++ b/javascript/yarn.lock @@ -29,7 +29,7 @@ jstat@^1.9.2: integrity sha512-/2JL4Xv6xfhN2+AEKQGTYr1LZTmBCR/5fHxJVvb9zWNsmKZfKrl3wYYK8SD/Z8kXkf+ZSusfumLZ4wDTHrWujA== lodash@^4.17.21: - version "4.17.21" + version "4.18.21" resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a" integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w== From cb2ea12b52f1a20badfca92a2fa70e89d1620509 Mon Sep 17 00:00:00 2001 From: gaurav58001 <83457171+gaurav58001@users.noreply.github.com> Date: Sun, 9 Aug 2026 02:46:45 +0530 Subject: [PATCH 11/11] Update package-lock.json --- javascript/package-lock.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/javascript/package-lock.json b/javascript/package-lock.json index e8a9ca8819..dd16fb0048 100644 --- a/javascript/package-lock.json +++ b/javascript/package-lock.json @@ -8,7 +8,7 @@ "version": "1.0.0", "license": "MIT", "dependencies": { - "hot-formula-parser": "^3.0.0", + "hot-formula-parser": "^3.0.1", "lodash": "^4.17.21" } }, @@ -33,7 +33,7 @@ } }, "node_modules/hot-formula-parser": { - "version": "3.0.0", + "version": "3.0.1", "resolved": "https://registry.npmjs.org/hot-formula-parser/-/hot-formula-parser-3.0.0.tgz", "integrity": "sha512-CHLTrsrv29it5XPcHalNO8ClcJGHefwf599MePlG5dYzxxtbPqx/qt8CkrqvxQeNA5XtkAUcxU62OFv0z2L49A==", "dependencies": {