From 6f7138be4615f235d4a44d55844f0e9d0e8ae130 Mon Sep 17 00:00:00 2001
From: Cameron Perera <cameron.perera@hashicorp.com>
Date: Fri, 30 Jan 2026 08:22:03 -0600
Subject: [PATCH] =?UTF-8?q?chore:=20=F0=9F=A4=96=20bump=20lodash=20to=204.?=
 =?UTF-8?q?17.23=20(#3149)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ui/desktop/electron-app/pnpm-lock.yaml | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/ui/desktop/electron-app/pnpm-lock.yaml b/ui/desktop/electron-app/pnpm-lock.yaml
index c31ee6134..cebdb3459 100644
--- a/ui/desktop/electron-app/pnpm-lock.yaml
+++ b/ui/desktop/electron-app/pnpm-lock.yaml
@@ -1842,10 +1842,10 @@ packages:
       }
     deprecated: This package is deprecated. Use the optional chaining (?.) operator instead.
 
-  lodash@4.17.21:
+  lodash@4.17.23:
     resolution:
       {
-        integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==,
+        integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==,
       }
 
   log-symbols@4.1.0:
@@ -2922,6 +2922,7 @@ packages:
         integrity: sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==,
       }
     engines: { node: '>=10' }
+    deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exhorbitant rates) by contacting i@izs.me
 
   temp@0.9.4:
     resolution:
@@ -3292,7 +3293,7 @@ snapshots:
       interpret: 3.1.1
       jiti: 2.4.2
       listr2: 7.0.2
-      lodash: 4.17.21
+      lodash: 4.17.23
       log-symbols: 4.1.0
       node-fetch: 2.7.0(encoding@0.1.13)
       rechoir: 0.8.0
@@ -4009,7 +4010,7 @@ snapshots:
       debug: 4.4.1
       fs-extra: 9.1.0
       glob: 7.2.3
-      lodash: 4.17.21
+      lodash: 4.17.23
       parse-author: 2.0.0
       semver: 7.7.2
       tmp-promise: 3.0.3
@@ -4026,7 +4027,7 @@ snapshots:
       electron-installer-common: 0.10.4
       fs-extra: 9.1.0
       get-folder-size: 2.0.1
-      lodash: 4.17.21
+      lodash: 4.17.23
       word-wrap: 1.2.5
       yargs: 16.2.0
     transitivePeerDependencies:
@@ -4058,7 +4059,7 @@ snapshots:
       '@electron/asar': 3.4.1
       debug: 4.4.1
       fs-extra: 7.0.1
-      lodash: 4.17.21
+      lodash: 4.17.23
       temp: 0.9.4
     optionalDependencies:
       '@electron/windows-sign': 1.2.2
@@ -4557,7 +4558,7 @@ snapshots:
 
   lodash.get@4.4.2: {}
 
-  lodash@4.17.21: {}
+  lodash@4.17.23: {}
 
   log-symbols@4.1.0:
     dependencies: