Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump lodash version #161

Merged
merged 1 commit into from
Feb 23, 2022
Merged

Bump lodash version #161

merged 1 commit into from
Feb 23, 2022

Conversation

jairo-bc
Copy link
Contributor

What? Why?

Snyk suggestions
https://app.snyk.io/org/bigcommerce/project/e947f4e9-85ef-4858-a86a-82bcdd6b2452/pr-check/350f32d1-efcd-42b0-8a4a-bea671eee6be

How was it tested?

npm test

cc @bigcommerce/storefront-team

@jairo-bc jairo-bc requested a review from a team February 18, 2022 23:23
bc-max
bc-max previously approved these changes Feb 21, 2022
CHANGELOG.md Outdated
@@ -2,6 +2,10 @@

## Unreleased

## 4.5.3
- Bump lodash version to 4.17.21 ([#x](https://github.com/bigcommerce/paper-handlebars/pull/x))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this have a pull request number instead of x in the URL?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice catch!

@@ -30,7 +30,7 @@
"handlebars-helpers": "0.8.4",
"handlebars-utils": "^1.0.6",
"he": "^1.2.0",
"lodash": "^4.17.13",
"lodash": "^4.17.21",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what is lodash used for in handlebars?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's an utility library, mostly used for iterating some different structures, objects.
I believe it's possisble to get rid of it

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is that something you would advise doing if possible? Maybe a follow up if not simple to strip?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I created a follow up ticket: https://jira.bigcommerce.com/browse/STRF-9673

Copy link
Contributor

@bc-jz bc-jz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jairo-bc jairo-bc merged commit 51d838c into bigcommerce:master Feb 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

3 participants