Skip to content

Update lodash 4.18.1#1400

Merged
peterzhuamazon merged 2 commits intoopensearch-project:mainfrom
peterzhuamazon:fix-lodash
Apr 3, 2026
Merged

Update lodash 4.18.1#1400
peterzhuamazon merged 2 commits intoopensearch-project:mainfrom
peterzhuamazon:fix-lodash

Conversation

@peterzhuamazon
Copy link
Copy Markdown
Member

Description

Update lodash 4.18.1

Issues Resolved

opensearch-project/opensearch-build#5966
https://advisories.opensearch.org/advisory/CVE-2026-4800

Check List

  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
gaiksaya
gaiksaya previously approved these changes Apr 3, 2026
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
@peterzhuamazon peterzhuamazon merged commit fc5b713 into opensearch-project:main Apr 3, 2026
16 of 17 checks passed
@github-project-automation github-project-automation bot moved this from 👀 In Review to ✅ Done in Engineering Effectiveness Board Apr 3, 2026
@peterzhuamazon peterzhuamazon deleted the fix-lodash branch April 3, 2026 21:47
opensearch-trigger-bot bot pushed a commit that referenced this pull request Apr 3, 2026
* Update lodash 4.18.1

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>

* Update lodash 4.18.1

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>

---------

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
(cherry picked from commit fc5b713)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
peterzhuamazon pushed a commit that referenced this pull request Apr 3, 2026
* Update lodash 4.18.1



* Update lodash 4.18.1



---------


(cherry picked from commit fc5b713)

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
@peterzhuamazon peterzhuamazon mentioned this pull request Apr 4, 2026
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport 3.6 release v3.6.0 Issues targeting release v3.6.0

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

3 participants