Merge pull request #914 from telefonicaid/dependabot/npm_and_yarn/underscore-1.13.8

fgalan · web-flow · commit a3309c5e1136 · 2026-03-05T12:39:30.000+01:00
Bump underscore from 1.12.1 to 1.13.8
diff --git a/CHANGES_NEXT_RELEASE b/CHANGES_NEXT_RELEASE
@@ -1 +1,2 @@
-- Upgrade express from 4.21.2 to 4.22.1
+- Upgrade express dep from 4.21.2 to 4.22.1
+- Upgrade underscore dep from 1.12.1 to 1.13.8 due to CVE-2026-27601
diff --git a/package.json b/package.json
@@ -72,7 +72,7 @@
     "logops": "2.1.2",
     "mqtt": "5.13.0",
     "sinon": "~6.1.0",
-    "underscore": "1.12.1"
+    "underscore": "1.13.8"
   },
   "husky": {
     "hooks": {

Original file line number	Diff line number	Diff line change
`@@ -1 +1,2 @@`
`1`		`-- Upgrade express from 4.21.2 to 4.22.1`
	`1`	`+- Upgrade express dep from 4.21.2 to 4.22.1`
	`2`	`+- Upgrade underscore dep from 1.12.1 to 1.13.8 due to CVE-2026-27601`