Skip to content

chore(ui): Update lodash/lodash-es to 4.18.1#19783

Merged
dvail merged 1 commit intomasterfrom
dv/update-lodash-to-latest
Apr 2, 2026
Merged

chore(ui): Update lodash/lodash-es to 4.18.1#19783
dvail merged 1 commit intomasterfrom
dv/update-lodash-to-latest

Conversation

@dvail
Copy link
Copy Markdown
Contributor

@dvail dvail commented Apr 2, 2026

Description

As titled. https://access.redhat.com/security/cve/cve-2026-4800

User-facing documentation

Testing and quality

  • the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
  • CI results are inspected

Automated testing

  • added unit tests
  • added e2e tests
  • added regression tests
  • added compatibility tests
  • modified existing tests

How I validated my change

CI

@dvail dvail requested a review from a team as a code owner April 2, 2026 13:28
@dvail
Copy link
Copy Markdown
Contributor Author

dvail commented Apr 2, 2026

This change is part of the following stack:

Change managed by git-spice.

@dvail dvail added backport release-4.8 backport release-4.9 https://spaces.redhat.com/spaces/StackRox/pages/558727298 backport release-4.10 pls-merge Indicates to the *reviewer* that the PR can be merged once tests pass and approval is granted labels Apr 2, 2026
@rhacs-bot
Copy link
Copy Markdown
Contributor

Images are ready for the commit at fc2e64b.

To use with deploy scripts, first export MAIN_IMAGE_TAG=4.11.x-542-gfc2e64b12b.

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 2, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 49.60%. Comparing base (8805baa) to head (fc2e64b).
⚠️ Report is 5 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master   #19783   +/-   ##
=======================================
  Coverage   49.59%   49.60%           
=======================================
  Files        2763     2763           
  Lines      208167   208167           
=======================================
+ Hits       103240   103253   +13     
+ Misses      97262    97250   -12     
+ Partials     7665     7664    -1     
Flag Coverage Δ
go-unit-tests 49.60% <ø> (+<0.01%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dvail dvail merged commit dc7b124 into master Apr 2, 2026
116 checks passed
@dvail dvail deleted the dv/update-lodash-to-latest branch April 2, 2026 16:58
@rhacs-bot
Copy link
Copy Markdown
Contributor

The backport to release-4.8 failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-release-4.8 release-4.8
# Navigate to the new working tree
cd .worktrees/backport-release-4.8
# Create a new branch
git switch --create backport-19783-to-release-4.8
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 dc7b1244d7c03ebe7f6301e13c592ce4228a6f93
# Push it to GitHub
git push --set-upstream origin backport-19783-to-release-4.8
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-release-4.8

Then, create a pull request where the base branch is release-4.8 and the compare/head branch is backport-19783-to-release-4.8.

@rhacs-bot
Copy link
Copy Markdown
Contributor

The backport to release-4.9 failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-release-4.9 release-4.9
# Navigate to the new working tree
cd .worktrees/backport-release-4.9
# Create a new branch
git switch --create backport-19783-to-release-4.9
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 dc7b1244d7c03ebe7f6301e13c592ce4228a6f93
# Push it to GitHub
git push --set-upstream origin backport-19783-to-release-4.9
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-release-4.9

Then, create a pull request where the base branch is release-4.9 and the compare/head branch is backport-19783-to-release-4.9.

@rhacs-bot
Copy link
Copy Markdown
Contributor

The backport to release-4.10 failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-release-4.10 release-4.10
# Navigate to the new working tree
cd .worktrees/backport-release-4.10
# Create a new branch
git switch --create backport-19783-to-release-4.10
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 dc7b1244d7c03ebe7f6301e13c592ce4228a6f93
# Push it to GitHub
git push --set-upstream origin backport-19783-to-release-4.10
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-release-4.10

Then, create a pull request where the base branch is release-4.10 and the compare/head branch is backport-19783-to-release-4.10.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 2, 2026

🚀 Build Images Ready

Images are ready for commit dc7b124. To use with deploy scripts:

export MAIN_IMAGE_TAG=4.11.x-545-gdc7b1244d7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ui backport release-4.8 backport release-4.9 https://spaces.redhat.com/spaces/StackRox/pages/558727298 backport release-4.10 pls-merge Indicates to the *reviewer* that the PR can be merged once tests pass and approval is granted

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants