From ea1f7d114bd66ca755a9b0a60d7dc7867f1cc653 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Wed, 16 Sep 2020 07:04:39 +0000 Subject: [PATCH] [Security] Bump dot-prop from 3.0.0 to 4.2.1 Bumps [dot-prop](https://github.com/sindresorhus/dot-prop) from 3.0.0 to 4.2.1. **This update includes a security fix.** - [Release notes](https://github.com/sindresorhus/dot-prop/releases) - [Commits](https://github.com/sindresorhus/dot-prop/compare/v3.0.0...v4.2.1) Signed-off-by: dependabot-preview[bot] --- package-lock.json | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/package-lock.json b/package-lock.json index e7ec3a7..584c7f5 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3453,8 +3453,9 @@ } }, "dot-prop": { - "version": "4.2.0", - "bundled": true, + "version": "4.2.1", + "resolved": "https://registry.npmjs.org/dot-prop/-/dot-prop-4.2.1.tgz", + "integrity": "sha512-l0p4+mIuJIua0mhxGoh4a+iNL9bmeK5DvnSVQa6T0OhrVmaEa1XScX5Etc673FePCJOArq/4Pa2cLGODUWTPOQ==", "dev": true, "requires": { "is-obj": "^1.0.0"