Update dependency lodash to v4.17.23 [SECURITY] (#1524)

renovate[bot] · PaulAdamDavis · web-flow · commit bc1efe6cb821 · 2026-01-27T10:02:52.000Z
Co-authored-by: renovate[bot] &lt;29139614+renovate[bot]@users.noreply.github.com&gt;
Co-authored-by: Paul Davis &lt;PaulAdamDavis@users.noreply.github.com&gt;
diff --git a/packages/mg-fs-utils/package.json b/packages/mg-fs-utils/package.json
@@ -33,7 +33,7 @@
     "csv-parse": "6.1.0",
     "dotenv": "17.2.3",
     "fs-extra": "11.3.3",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "sharp": "0.34.5",
     "transliteration": "2.6.1"
   }
diff --git a/packages/mg-json/package.json b/packages/mg-json/package.json
@@ -28,7 +28,7 @@
     "@tryghost/string": "0.2.21",
     "bson-objectid": "2.0.4",
     "html-entities": "2.6.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "node-email-verifier": "4.0.0"
   }
 }
diff --git a/packages/mg-linkfixer/package.json b/packages/mg-linkfixer/package.json
@@ -28,6 +28,6 @@
   },
   "dependencies": {
     "cheerio": "1.2.0",
-    "lodash": "4.17.21"
+    "lodash": "4.17.23"
   }
 }
diff --git a/packages/mg-substack-members-csv/package.json b/packages/mg-substack-members-csv/package.json
@@ -30,6 +30,6 @@
     "bluebird": "3.7.2",
     "csv-parser": "3.2.0",
     "ghost-ignition": "4.6.3",
-    "lodash": "4.17.21"
+    "lodash": "4.17.23"
   }
 }
diff --git a/packages/mg-substack/package.json b/packages/mg-substack/package.json
@@ -33,7 +33,7 @@
     "cheerio": "1.2.0",
     "he": "1.2.0",
     "html-entities": "2.6.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "simple-dom": "1.4.0",
     "srcset": "5.0.3"
   }
diff --git a/packages/mg-webscraper/package.json b/packages/mg-webscraper/package.json
@@ -27,7 +27,7 @@
   "dependencies": {
     "@tryghost/errors": "1.3.8",
     "@tryghost/string": "0.2.21",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "omit-empty": "1.0.0",
     "scrape-it": "6.1.12"
   }
diff --git a/packages/migrate/package.json b/packages/migrate/package.json
@@ -67,7 +67,7 @@
     "@tryghost/string": "0.2.21",
     "fs-extra": "11.3.3",
     "listr": "0.14.3",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "pretty-ms": "9.3.0",
     "update-notifier": "7.3.1",
     "xml2json": "0.12.0"
diff --git a/yarn.lock b/yarn.lock
@@ -8724,11 +8724,16 @@ lodash.upperfirst@4.3.1:
   resolved "https://registry.yarnpkg.com/lodash.upperfirst/-/lodash.upperfirst-4.3.1.tgz#1365edf431480481ef0d1c68957a5ed99d49f7ce"
   integrity sha512-sReKOYJIJf74dhJONhU4e0/shzi1trVbSWDOhKYE5XV2O+H7Sb2Dihwuc7xWxVl+DgFPyTqIN3zMfT9cq5iWDg==
 
-lodash@4.17.21, lodash@^4.17.21:
+lodash@4.17.21:
   version "4.17.21"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
   integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
 
+lodash@4.17.23, lodash@^4.17.21:
+  version "4.17.23"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
+  integrity sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==
+
 log-symbols@6.0.0, log-symbols@^6.0.0:
   version "6.0.0"
   resolved "https://registry.yarnpkg.com/log-symbols/-/log-symbols-6.0.0.tgz#bb95e5f05322651cac30c0feb6404f9f2a8a9439"

Original file line number	Diff line number	Diff line change
`@@ -33,7 +33,7 @@`
`33`	`33`	`"csv-parse": "6.1.0",`
`34`	`34`	`"dotenv": "17.2.3",`
`35`	`35`	`"fs-extra": "11.3.3",`
`36`		`- "lodash": "4.17.21",`
	`36`	`+ "lodash": "4.17.23",`
`37`	`37`	`"sharp": "0.34.5",`
`38`	`38`	`"transliteration": "2.6.1"`
`39`	`39`	`}`
Original file line number	Diff line number	Diff line change
`@@ -28,7 +28,7 @@`
`28`	`28`	`"@tryghost/string": "0.2.21",`
`29`	`29`	`"bson-objectid": "2.0.4",`
`30`	`30`	`"html-entities": "2.6.0",`
`31`		`- "lodash": "4.17.21",`
	`31`	`+ "lodash": "4.17.23",`
`32`	`32`	`"node-email-verifier": "4.0.0"`
`33`	`33`	`}`
`34`	`34`	`}`
Original file line number	Diff line number	Diff line change
`@@ -28,6 +28,6 @@`
`28`	`28`	`},`
`29`	`29`	`"dependencies": {`
`30`	`30`	`"cheerio": "1.2.0",`
`31`		`- "lodash": "4.17.21"`
	`31`	`+ "lodash": "4.17.23"`
`32`	`32`	`}`
`33`	`33`	`}`
Original file line number	Diff line number	Diff line change
`@@ -30,6 +30,6 @@`
`30`	`30`	`"bluebird": "3.7.2",`
`31`	`31`	`"csv-parser": "3.2.0",`
`32`	`32`	`"ghost-ignition": "4.6.3",`
`33`		`- "lodash": "4.17.21"`
	`33`	`+ "lodash": "4.17.23"`
`34`	`34`	`}`
`35`	`35`	`}`
Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,7 @@`
`27`	`27`	`"dependencies": {`
`28`	`28`	`"@tryghost/errors": "1.3.8",`
`29`	`29`	`"@tryghost/string": "0.2.21",`
`30`		`- "lodash": "4.17.21",`
	`30`	`+ "lodash": "4.17.23",`
`31`	`31`	`"omit-empty": "1.0.0",`
`32`	`32`	`"scrape-it": "6.1.12"`
`33`	`33`	`}`