Repository navigation
[npm] Bump @types/lodash from 4.17.25 to 4.17.26 - #415
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@types/lodash](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/lodash) from 4.17.25 to 4.17.26. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/lodash) --- updated-dependencies: - dependency-name: "@types/lodash" dependency-version: 4.17.26 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![ecosquad-autoreview[bot]](https://avatars.githubusercontent.com/in/5135070?s=60&v=4){kind=small}
There was a problem hiding this comment.
Review
This PR is a routine Dependabot bump of @types/lodash from 4.17.25 to 4.17.26. It touches only package.json (devDependencies) and the matching pnpm-lock.yaml entries (specifier, version, integrity hash, and the snapshot). No application code is changed.
CI: the check job succeeded and GitGuardian found no secrets.
Findings
No correctness, security, or build issues with this change.
Suggestion (pre-existing, non-blocking): lodash is at ^4.18.1 while @types/lodash is at ^4.17.x. The type definitions lag behind the runtime package. This gap existed before this PR, so it does not block the merge — but it's worth noting that a type-definition bump to a lower 4.17.x version does not cover the 4.18.x runtime API. If you ever hit type errors for newer lodash methods, the @types/lodash package may need a larger jump.
Verdict
Approve — the change is a safe, standard type-definition update.
Bumps @types/lodash from 4.17.25 to 4.17.26.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)