From 98b6c72c92ea1f9292c488652f73e85e829a4748 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 2 Apr 2026 14:28:13 +0000
Subject: [PATCH] chore: update dependency lodash to ^4.18.1 [security]

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 acceptance/repository-cloudant/package.json     | 2 +-
 examples/access-control-migration/package.json  | 2 +-
 examples/lb3-application/package.json           | 2 +-
 examples/passport-login/package.json            | 4 ++--
 examples/references-many/package.json           | 2 +-
 examples/rest-crud/package.json                 | 2 +-
 examples/todo-jwt/package.json                  | 2 +-
 examples/todo-list/package.json                 | 2 +-
 examples/todo/package.json                      | 2 +-
 extensions/authentication-jwt/package.json      | 2 +-
 extensions/authentication-passport/package.json | 2 +-
 extensions/socketio/package.json                | 2 +-
 fixtures/mock-oauth2-provider/package.json      | 2 +-
 package-lock.json                               | 1 +
 packages/authentication/package.json            | 2 +-
 packages/build/package.json                     | 2 +-
 packages/cli/package.json                       | 2 +-
 packages/metadata/package.json                  | 2 +-
 packages/openapi-v3/package.json                | 2 +-
 packages/repository-tests/package.json          | 2 +-
 packages/repository/package.json                | 2 +-
 packages/rest/package.json                      | 2 +-
 22 files changed, 23 insertions(+), 22 deletions(-)

diff --git a/acceptance/repository-cloudant/package.json b/acceptance/repository-cloudant/package.json
index d67c8a9260c2..2e130577a058 100644
--- a/acceptance/repository-cloudant/package.json
+++ b/acceptance/repository-cloudant/package.json
@@ -41,7 +41,7 @@
     "chalk": "^4.1.2",
     "debug": "^4.4.3",
     "dockerode": "^3.3.5",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "loopback-connector-cloudant": "2.5.0",
     "ms": "2.1.3",
     "tslib": "^2.8.1",
diff --git a/examples/access-control-migration/package.json b/examples/access-control-migration/package.json
index 9163afa274c9..6099d971ae87 100644
--- a/examples/access-control-migration/package.json
+++ b/examples/access-control-migration/package.json
@@ -74,7 +74,7 @@
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.37",
     "eslint": "^8.57.1",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "typescript": "~5.2.2"
   }
 }
diff --git a/examples/lb3-application/package.json b/examples/lb3-application/package.json
index 8e9a3f2b1378..cd62bd9e43ce 100644
--- a/examples/lb3-application/package.json
+++ b/examples/lb3-application/package.json
@@ -69,7 +69,7 @@
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.37",
     "eslint": "^8.57.1",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "should": "^13.2.3",
     "typescript": "~5.2.2"
   }
diff --git a/examples/passport-login/package.json b/examples/passport-login/package.json
index 95d19755f1c2..9e7ba1a47eca 100644
--- a/examples/passport-login/package.json
+++ b/examples/passport-login/package.json
@@ -73,7 +73,7 @@
     "debug": "^4.4.3",
     "express": "^4.22.1",
     "express-session": "^1.19.0",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "passport": "^0.7.0",
     "passport-facebook": "^3.0.0",
     "passport-google": "^0.3.0",
@@ -96,7 +96,7 @@
     "@types/node": "^20.19.37",
     "axios": "^1.14.0",
     "eslint": "^8.57.1",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "typescript": "~5.2.2"
   }
 }
diff --git a/examples/references-many/package.json b/examples/references-many/package.json
index c9e1a98b7e81..330fb2e73676 100644
--- a/examples/references-many/package.json
+++ b/examples/references-many/package.json
@@ -70,7 +70,7 @@
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.37",
     "eslint": "^8.57.1",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "typescript": "~5.2.2"
   }
 }
diff --git a/examples/rest-crud/package.json b/examples/rest-crud/package.json
index 86397aa30252..ea9a3fa77b38 100644
--- a/examples/rest-crud/package.json
+++ b/examples/rest-crud/package.json
@@ -67,7 +67,7 @@
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.37",
     "eslint": "^8.57.1",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "typescript": "~5.2.2"
   }
 }
diff --git a/examples/todo-jwt/package.json b/examples/todo-jwt/package.json
index bc0cf83ae810..588f93b738c0 100644
--- a/examples/todo-jwt/package.json
+++ b/examples/todo-jwt/package.json
@@ -74,7 +74,7 @@
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.37",
     "eslint": "^8.57.1",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "typescript": "~5.2.2"
   }
 }
diff --git a/examples/todo-list/package.json b/examples/todo-list/package.json
index d17476c801e2..ab23b5240c67 100644
--- a/examples/todo-list/package.json
+++ b/examples/todo-list/package.json
@@ -70,7 +70,7 @@
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.37",
     "eslint": "^8.57.1",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "typescript": "~5.2.2"
   }
 }
diff --git a/examples/todo/package.json b/examples/todo/package.json
index 876f5e8c7232..9d409bbd2821 100644
--- a/examples/todo/package.json
+++ b/examples/todo/package.json
@@ -70,7 +70,7 @@
     "@types/morgan": "^1.9.10",
     "@types/node": "^20.19.37",
     "eslint": "^8.57.1",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "typescript": "~5.2.2"
   }
 }
diff --git a/extensions/authentication-jwt/package.json b/extensions/authentication-jwt/package.json
index d756aa5a886b..999672246197 100644
--- a/extensions/authentication-jwt/package.json
+++ b/extensions/authentication-jwt/package.json
@@ -61,7 +61,7 @@
     "@types/debug": "^4.1.13",
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.37",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "typescript": "~5.2.2"
   }
 }
diff --git a/extensions/authentication-passport/package.json b/extensions/authentication-passport/package.json
index 7f47d8a992ef..8a4eaa17d864 100644
--- a/extensions/authentication-passport/package.json
+++ b/extensions/authentication-passport/package.json
@@ -71,7 +71,7 @@
     "express": "^4.22.1",
     "form-data": "^4.0.5",
     "jsonwebtoken": "^9.0.3",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "passport-http": "^0.3.0",
     "passport-oauth2": "^1.8.0",
     "qs": "^6.15.0",
diff --git a/extensions/socketio/package.json b/extensions/socketio/package.json
index a0eacd9cc853..6859eaebca1c 100644
--- a/extensions/socketio/package.json
+++ b/extensions/socketio/package.json
@@ -51,7 +51,7 @@
     "@types/lodash": "^4.17.24",
     "cors": "^2.8.6",
     "debug": "^4.4.3",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "socket.io": "^4.8.3"
   },
   "devDependencies": {
diff --git a/fixtures/mock-oauth2-provider/package.json b/fixtures/mock-oauth2-provider/package.json
index f09a4dcae366..07b5a30dc65e 100644
--- a/fixtures/mock-oauth2-provider/package.json
+++ b/fixtures/mock-oauth2-provider/package.json
@@ -45,7 +45,7 @@
     "express": "^4.22.1",
     "form-data": "^4.0.5",
     "jsonwebtoken": "^9.0.3",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "tslib": "^2.8.1"
   },
   "devDependencies": {
diff --git a/package-lock.json b/package-lock.json
index 580fd1baa719..499773f918ae 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -975,6 +975,7 @@
         "debug": "^4.4.3",
         "express": "^4.22.1",
         "express-session": "^1.19.0",
+        "lodash": "^4.18.1",
         "passport": "^0.7.0",
         "passport-facebook": "^3.0.0",
         "passport-google": "^0.3.0",
diff --git a/packages/authentication/package.json b/packages/authentication/package.json
index 0b2d0ef88cd5..1334de2cd1d8 100644
--- a/packages/authentication/package.json
+++ b/packages/authentication/package.json
@@ -46,7 +46,7 @@
     "@loopback/security": "^0.12.11",
     "@types/express": "^4.17.25",
     "@types/lodash": "^4.17.24",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "tslib": "^2.8.1"
   },
   "devDependencies": {
diff --git a/packages/build/package.json b/packages/build/package.json
index 5dd63568b7c4..ff37e40e0737 100644
--- a/packages/build/package.json
+++ b/packages/build/package.json
@@ -39,7 +39,7 @@
     "eslint": "^8.57.1",
     "fs-extra": "^11.3.4",
     "glob": "^13.0.6",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "mocha": "^11.7.5",
     "nyc": "^18.0.0",
     "prettier": "^3.8.1",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 35838b61c111..d432315c58dc 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -54,7 +54,7 @@
     "inquirer-autocomplete-prompt": "^2.0.1",
     "json5": "^2.2.3",
     "latest-version": "^5.1.0",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "minimatch": "^10.2.5",
     "minimist": "^1.2.8",
     "mkdirp": "^3.0.1",
diff --git a/packages/metadata/package.json b/packages/metadata/package.json
index d88486e3b260..4f8afd25ec60 100644
--- a/packages/metadata/package.json
+++ b/packages/metadata/package.json
@@ -40,7 +40,7 @@
   ],
   "dependencies": {
     "debug": "^4.4.3",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "reflect-metadata": "^0.2.1",
     "tslib": "^2.8.1"
   },
diff --git a/packages/openapi-v3/package.json b/packages/openapi-v3/package.json
index dd1d45c49f66..a4a4f15eeacd 100644
--- a/packages/openapi-v3/package.json
+++ b/packages/openapi-v3/package.json
@@ -46,7 +46,7 @@
     "debug": "^4.4.3",
     "http-status": "^1.8.1",
     "json-merge-patch": "^1.0.2",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "openapi3-ts": "^2.0.2",
     "tslib": "^2.8.1"
   },
diff --git a/packages/repository-tests/package.json b/packages/repository-tests/package.json
index 16b51dca2ee0..7ba8a7e09a8f 100644
--- a/packages/repository-tests/package.json
+++ b/packages/repository-tests/package.json
@@ -48,6 +48,6 @@
     "@types/debug": "^4.1.13",
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.37",
-    "lodash": "^4.17.23"
+    "lodash": "^4.18.1"
   }
 }
diff --git a/packages/repository/package.json b/packages/repository/package.json
index 443018932fe9..bac4f5568863 100644
--- a/packages/repository/package.json
+++ b/packages/repository/package.json
@@ -39,7 +39,7 @@
     "@loopback/filter": "^6.0.10",
     "@types/debug": "^4.1.13",
     "debug": "^4.4.3",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "loopback-datasource-juggler": "^6.0.4",
     "tslib": "^2.8.1"
   },
diff --git a/packages/rest/package.json b/packages/rest/package.json
index ca5c26b652f3..f1eb195dc2ec 100644
--- a/packages/rest/package.json
+++ b/packages/rest/package.json
@@ -61,7 +61,7 @@
     "http-errors": "^2.0.1",
     "js-yaml": "^4.1.1",
     "json-schema-compare": "^0.2.2",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "on-finished": "^2.4.1",
     "path-to-regexp": "^6.3.0",
     "qs": "^6.15.0",