Charles Bochet ca4fc5615f security: refresh lodash + picomatch in twenty-apps lockfiles (#21378) ...

## What

Clears the 4 remaining High alerts in the standalone `twenty-apps`
lockfiles (hello-world, call-recording). Both are transitive and already
in-range, so a plain lockfile refresh picks up the patched releases — no
resolutions.

| Package | From → To | Requested by | Advisory |
|---|---|---|---|
| lodash | 4.17.x → 4.18.1 | `@genql/runtime` (`^4.17.20`),
`twenty-client-sdk` (`^4.17.21`) | GHSA-r5fr-rjxr-66jc |
| picomatch | 4.0.x → 4.0.4 | `tinyglobby` (`^4.0.3`) |
GHSA-c2c7-rcm5-vvqj |

Only the two app `yarn.lock` files change. These are isolated
example/internal apps (not in the root workspace), in the same family as
the already-merged #21371 / #21374.

2026-06-09 19:11:02 +02:00

..

community/github-connector

security(apps): bump twenty-sdk to 2.10.1 across twenty-apps (tmp, undici) (#21344)

2026-06-08 21:31:14 +02:00

examples

security: refresh lodash + picomatch in twenty-apps lockfiles (#21378)

2026-06-09 19:11:02 +02:00

fixtures

feat: allow apps to add view fields to existing views (defineViewField) (#21160)

2026-06-05 08:06:30 +00:00

internal

security: refresh lodash + picomatch in twenty-apps lockfiles (#21378)

2026-06-09 19:11:02 +02:00

.gitignore

Move fixture apps from twenty-sdk to twenty-apps/fixtures (#18531)

2026-03-10 17:29:53 +01:00