twenty

mirror of https://github.com/twentyhq/twenty.git synced 2026-06-12 01:46:39 -04:00

Files

Charles Bochet ca4fc5615f security: refresh lodash + picomatch in twenty-apps lockfiles (#21378 )

## What

Clears the 4 remaining High alerts in the standalone `twenty-apps`
lockfiles (hello-world, call-recording). Both are transitive and already
in-range, so a plain lockfile refresh picks up the patched releases — no
resolutions.

| Package | From → To | Requested by | Advisory |
|---|---|---|---|
| lodash | 4.17.x → 4.18.1 | `@genql/runtime` (`^4.17.20`),
`twenty-client-sdk` (`^4.17.21`) | GHSA-r5fr-rjxr-66jc |
| picomatch | 4.0.x → 4.0.4 | `tinyglobby` (`^4.0.3`) |
GHSA-c2c7-rcm5-vvqj |

Only the two app `yarn.lock` files change. These are isolated
example/internal apps (not in the root workspace), in the same family as
the already-merged #21371 / #21374.

2026-06-09 19:11:02 +02:00

call-recording

security: refresh lodash + picomatch in twenty-apps lockfiles (#21378 )

2026-06-09 19:11:02 +02:00

exa

security(apps): bump twenty-sdk to 2.10.1 across twenty-apps (tmp, undici) (#21344 )

2026-06-08 21:31:14 +02:00

people-data-labs

security(apps): bump twenty-sdk to 2.10.1 across twenty-apps (tmp, undici) (#21344 )

2026-06-08 21:31:14 +02:00

self-hosting

security(apps): bump twenty-sdk to 2.10.1 for the 3 remaining pre-2.0 apps (tmp, undici) (#21374 )