From 76065043b63a9d427babfcaf30f798b80a7074e6 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 23 Jun 2026 02:42:49 +0000
Subject: [PATCH] chore: update dependency lodash-es to v4.18.1 [security]

---
 web/package.json | 2 +-
 web/yarn.lock    | 9 ++++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/web/package.json b/web/package.json
index 058c64e9d..4a21d840d 100644
--- a/web/package.json
+++ b/web/package.json
@@ -171,7 +171,7 @@
         "leaflet": "1.9.4",
         "lexical": "0.12.2",
         "localforage": "1.10.0",
-        "lodash-es": "4.17.21",
+        "lodash-es": "4.18.1",
         "lru-cache": "8.0.4",
         "mini-svg-data-uri": "1.4.4",
         "moment-timezone": "0.5.43",
diff --git a/web/yarn.lock b/web/yarn.lock
index 76f4a50e4..0829b0b74 100644
--- a/web/yarn.lock
+++ b/web/yarn.lock
@@ -6628,7 +6628,7 @@ __metadata:
     lexical: "npm:0.12.2"
     lint-staged: "npm:13.2.2"
     localforage: "npm:1.10.0"
-    lodash-es: "npm:4.17.21"
+    lodash-es: "npm:4.18.1"
     lru-cache: "npm:8.0.4"
     mini-svg-data-uri: "npm:1.4.4"
     moment-timezone: "npm:0.5.43"
@@ -19375,6 +19375,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"lodash-es@npm:4.18.1":
+  version: 4.18.1
+  resolution: "lodash-es@npm:4.18.1"
+  checksum: 10c0/35d4dcf87ef07f8d090f409447575800108057e360b445f590d0d25d09e3d1e33a163d2fc100d4d072b0f901d5e2fc533cd7c4bfd8eeb38a06abec693823c8b8
+  languageName: node
+  linkType: hard
+
 "lodash.debounce@npm:^4.0.8":
   version: 4.0.8
   resolution: "lodash.debounce@npm:4.0.8"