Skip to content

Bump lodash and @astrojs/language-server#172

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-174881a9b4
Closed

Bump lodash and @astrojs/language-server#172
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-174881a9b4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 2, 2026

Copy link
Copy Markdown
Contributor

Removes lodash. It's no longer used after updating ancestor dependency @astrojs/language-server. These dependencies need to be updated together.

Removes lodash

Updates @astrojs/language-server from 2.16.3 to 2.16.6

Release notes

Sourced from @​astrojs/language-server's releases.

@​astrojs/language-server@​2.16.6

Patch Changes

@​astrojs/language-server@​2.16.5

Patch Changes

  • #15895 7b4b254 Thanks @​Princesseuh! - Updates Volar services to 0.0.70. This updates notably mean that the transitive dependency yaml-language-server no longer depends on a vulnerable version of lodash, causing warnings to show when installing the language server.
Changelog

Sourced from @​astrojs/language-server's changelog.

2.16.6

Patch Changes

2.16.5

Patch Changes

  • #15895 7b4b254 Thanks @​Princesseuh! - Updates Volar services to 0.0.70. This updates notably mean that the transitive dependency yaml-language-server no longer depends on a vulnerable version of lodash, causing warnings to show when installing the language server.

2.16.4

Patch Changes

2.16.1

Patch Changes

2.16.1-beta.1

Patch Changes

2.16.1-alpha.0

Patch Changes

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 2, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-174881a9b4 branch from 0b1de09 to 36ac6d5 Compare April 15, 2026 09:26
Removes [lodash](https://github.com/lodash/lodash). It's no longer used after updating ancestor dependency [@astrojs/language-server](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/language-server). These dependencies need to be updated together.


Removes `lodash`

Updates `@astrojs/language-server` from 2.16.3 to 2.16.6
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/language-server/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/language-server@2.16.6/packages/language-tools/language-server)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@astrojs/language-server"
  dependency-version: 2.16.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-174881a9b4 branch from 36ac6d5 to 0d23c2e Compare April 15, 2026 10:36
@dependabot @github

dependabot Bot commented on behalf of github Apr 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer a dependency, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 15, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-174881a9b4 branch April 15, 2026 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants