Skip to content

Bump lodash and generator-jhipster#1633

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-9e6fa19992
Open

Bump lodash and generator-jhipster#1633
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-9e6fa19992

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Copy link
Copy Markdown
Contributor

Removes lodash. It's no longer used after updating ancestor dependency generator-jhipster. These dependencies need to be updated together.

Removes lodash

Updates generator-jhipster from 8.11.0 to 9.1.0

Release notes

Sourced from generator-jhipster's releases.

v9.1.0

What's changed

🌟 Highlights

🍃 Spring Boot and security

  • Spring Boot 4.0.6 (#33553) - latest Spring Boot version for generated applications
  • Configuration sanitization for hardening (#32708) - tighter handling of generated configuration
  • JWT credentials fix (#33479) - fixes SecurityUtils.getCurrentUserJWT for JWT credentials

🅰️ Angular

  • OnPush change detection everywhere (#33218) - all generated components now use ChangeDetectionStrategy.OnPush
  • Rewritten service worker provider (#33329) - cleaner service worker setup in generated apps
  • SSR-safe html lang updates (#33330) - uses inject(DOCUMENT) for server-safe language updates

⚛️ React

  • Jest to Vitest migration (#33200) - generated React apps now use Vitest
  • react-top-loading-bar (#33039) - replaces react-redux-loading-bar
  • User management reducer fix (#33555) - fixes errorMessage handling

🟩 Vue

  • @​module-federation/vite (#33283) - Vue microfrontends now use the Vite integration
  • rsbuild microfrontends by default (#33455) - rsbuild is now the default for generated Vue microfrontends
  • Gateway resources through module federation (#33485) - exposes and loads gateway resources through module federation
  • Stale auth token cleanup (#33503) - removes outdated authentication tokens from storage

🧩 Internal improvements

  • Improved TypeScript support (#33332, #33096) - each generator exports its own types, and new blueprints are generated in TypeScript
  • CI/CD generator split (#33398, #33388) - moves commands into ci-cd and ci-cd:common
  • Typed generator utilities (#33352, #33351, #33391) - more typed helpers and better writeFiles inference

🤖 AI and generator workflow

  • AGENTS.md and AI assistant disclosure policy (#33130) - documents expectations for AI-assisted contributions

📊 By the numbers

🔧 More changes

🔧 Core generator and templates

... (truncated)

Commits
  • 6b7444c Release v9.1.0
  • fa02b11 Prepare for next release
  • 3f176f5 Fix: Restore Infinispan caching in integration tests (#33571)
  • 0d5b8f6 apply adjusted eslint ejs (#33570)
  • 213c090 build(deps): bump com.gorylenko.gradle-git-properties (#33569)
  • 4c54354 build(deps-dev): bump cypress in /generators/cypress/resources (#33568)
  • 6aa382f build(deps): bump dayjs in /generators/client/resources (#33567)
  • 2bfc0bf use individual rules in eslint-disable and apply other rules (#33560)
  • 4bbeacc build(deps): bump io.gatling.highcharts:gatling-charts-highcharts (#33566)
  • 980d609 build(deps-dev): bump io.gatling:gatling-maven-plugin (#33565)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 4, 2026
Removes [lodash](https://github.com/lodash/lodash). It's no longer used after updating ancestor dependency [generator-jhipster](https://github.com/jhipster/generator-jhipster). These dependencies need to be updated together.


Removes `lodash`

Updates `generator-jhipster` from 8.11.0 to 9.1.0
- [Release notes](https://github.com/jhipster/generator-jhipster/releases)
- [Commits](jhipster/generator-jhipster@v8.11.0...v9.1.0)

---
updated-dependencies:
- dependency-name: generator-jhipster
  dependency-version: 9.1.0
  dependency-type: direct:production
- dependency-name: lodash
  dependency-version:
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-9e6fa19992 branch from b30b7bb to aeb13fd Compare June 6, 2026 04:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants