Replace lodash.template package with lodash itself due to advisory

release-it-plugins · May 6, 2024 · e19757a · e19757a
1 parent 0444561
commit e19757a
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 51 deletions.
diff --git a/index.js b/index.js
@@ -5,7 +5,7 @@ import { EOL } from 'os';
 import fs from 'fs';
 import which from 'which';
 import { Plugin } from 'release-it';
-import template from 'lodash.template';
+import template from 'lodash/template';
 import tmp from 'tmp';
 import execa from 'execa';
 import { fromMarkdown } from 'mdast-util-from-markdown';

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -33,7 +33,7 @@
   "dependencies": {
     "execa": "^5.1.1",
     "lerna-changelog": "^2.2.0",
-    "lodash.template": "^4.5.0",
+    "lodash": "^4.17.21",
     "mdast-util-from-markdown": "^1.2.0",
     "tmp": "^0.2.1",
     "validate-peer-dependencies": "^2.0.0",