From c6d3d4be4f8180875e6deb5876a61cf084b2d24e Mon Sep 17 00:00:00 2001
From: "coderabbitai[bot]"
 <136622811+coderabbitai[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 09:09:13 +0000
Subject: [PATCH] Bump lodash to 4.18.0 for 3 advisories

---
 crates/napi/package.json | 5 ++++-
 crates/napi/yarn.lock    | 8 ++++----
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/crates/napi/package.json b/crates/napi/package.json
index 976b010856..01464cbee7 100644
--- a/crates/napi/package.json
+++ b/crates/napi/package.json
@@ -54,6 +54,9 @@
     "ts-node": "10.9.2",
     "typescript": "5.6.3"
   },
+  "resolutions": {
+    "lodash": "4.18.0"
+  },
   "ava": {
     "require": [
       "ts-node/register"
@@ -67,4 +70,4 @@
       "TS_NODE_PROJECT": "./tsconfig.json"
     }
   }
-}
\ No newline at end of file
+}
diff --git a/crates/napi/yarn.lock b/crates/napi/yarn.lock
index bac57db3ba..049737aa9f 100644
--- a/crates/napi/yarn.lock
+++ b/crates/napi/yarn.lock
@@ -753,10 +753,10 @@ load-json-file@^7.0.1:
   resolved "https://registry.yarnpkg.com/load-json-file/-/load-json-file-7.0.1.tgz#a3c9fde6beffb6bedb5acf104fad6bb1604e1b00"
   integrity sha512-Gnxj3ev3mB5TkVBGad0JM6dmLiQL+o0t23JPBZ9sd+yvSLk05mFoqKBw5N8gbbkU4TNXyqCgIrl/VM17OgUIgQ==
 
-lodash@^4.17.15:
-  version "4.17.21"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
-  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
+lodash@4.18.0, lodash@^4.17.15:
+  version "4.18.0"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.0.tgz#dfd726f07ab2e39dd763de28fcf66e395c03e440"
+  integrity sha512-l1mfj2atMqndAHI3ls7XqPxEjV2J9ZkcNyHpoZA3r2T1LLwDB69jgkMWh71YKwhBbK0G2f4WSn05ahmQXVxupA==
 
 lru-cache@^6.0.0:
   version "6.0.0"