Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

4.17 #5233

Closed
wants to merge 83 commits into from
Closed

4.17 #5233

wants to merge 83 commits into from

Conversation

qiudaoermu
Copy link

find the longest element in a array and return it

jdalton and others added 30 commits June 14, 2017 07:17
@jdalton
Ensure cloneByPath preserves uncloneable values. [closes #3203]
5a3ff73
@jdalton
Avoid merging properties on to __proto__ objects.
d8e069c
@jdalton
Fix cloneDeep with circularly dependent Sets/Maps. [closes #3122]
b8c719d
@jdalton
Use new to create the array clone.
7cb477a
@jdalton
Support symbols in property paths of set. [closes #3189]
45ac7f3
@jdalton
stringToPath: avoid shadowing variable. (#3226)
20c5307
@jdalton
Avoid shadowing result in remainingWait. (#3280)
f831977
@jdalton
Replacing a regex in stringToPath with a quick character code check. (
7167a78 
#3308)
@jdalton
Enable _.words to detect ordinals in compound words. [closes #3561]
dac890a
@jdalton
Add 4.17.5 branch to travis.
a1b5305
@jdalton
Avoid using the values toString method in _.invert if it’s not a func…
a73b92b 
…tion. [closes #3260]
@jdalton
Make _.defaults avoid accessing property values it doesn't need to. [c…
5adb4ee 
…loses #2983]
@jdalton
Fix style nits.
5e58cd2
@jdalton
Rebuild lodash and docs.
ce32a89
@jdalton
Bump to v4.17.5.
97e9edc
@jdalton
Use util.types to migrate DEP0103 in Node.js.
852988e 
PR: #3704
@jdalton
Rebuild lodash and docs.
4680cda
@jdalton
Bump to v4.17.9.
b002100
@jdalton
Rebuild lodash and docs.
a65fd33
@jdalton
Bump to v4.17.10.
67389a8
@jdalton
Ensure Object.prototype is not augmented by _.merge.
90e6199
@manuel-jasso @jdalton
Prevent ReDoS
5c08f18 
To fix https://github.com/lodash/lodash/issues/3359, modified reHasUnicodeWord to remove an unnecessary comma which made the regex greedy, this is only a test regex and not a matching regex. Added unit tests, this now should run under 5 ms instead of over 1000 ms for huge 50k+ char words.
@jdalton
Cleanup ReDoS test.
6e62e1e
@sinaabadi @jdalton
Fix inconsistent merging of multiple sources to function property
79b9d20
@jdalton
Cleanup _.merge tests for function properties.
278c6dd
@jdalton
Ensure placeholder properties are set for fp.convert() results. [closes
2de676f 
#3440]
@jdalton
Remove prototype property check in safeGet().
e5f9af5
@jdalton
Add test for indirectly merging Object properties.
d8ddc1a
@jdalton
Lint nits.
552f94a
@jdalton
Commit package-lock.json.
eaa9f36
jdalton and others added 25 commits July 10, 2019 06:33
@jdalton
Bump to v4.17.14.
be87d30
@jdalton
Rebuild lodash and docs.
b185fce
@jdalton
Bump to v4.17.15.
ddfd9b1
@theGABS @jdalton
change documentation, show clearly how sortBy work with two iteratees (…
b281dde 
…#4467)
@megawac @jdalton
(4.17) Short circuit sortedIndexBy methods for empty arrays (#4497)
602cc3f
@falsyvalues @jdalton
Ensure orderBy will accept iteratee path arrays #4438 (#4513)
659e8c0
@arty-name @jdalton
Document matches* shorthands for over* methods (#4510) (#4514)
94c3a81
@cukejianya @jdalton
Fix lodash.isEqual for circular references (#4320) (#4515)
0cec225
@alexbrasetvik
Sanitize sourceURL so it cannot affect evaled code (#4518)
e7b28ea
@JackuB
fix(zipObjectDeep): prototype pollution (#4759)
c84fe82
@mathiasbynens
Bump to v4.17.16
3a3b0fd
@mathiasbynens
Rebuild lodash and docs
1144918
@mathiasbynens
Bump to v4.17.17
a370ac8
@mathiasbynens
Bump to v4.17.18
1b6c282
@mathiasbynens
Add npm-package
2e1c0f2
@mathiasbynens
Bump to v4.17.19
d7fbc52
@bnjmnt4n
Remove /npm-package.
aa816b3
@bnjmnt4n
Re-enable Travis tests on 4.17 branch.
5d046f3
@bnjmnt4n
Temporarily use a custom fork of lodash-cli.
846e434
@bnjmnt4n
test.js: Remove trailing comma.
00f0f62
@bnjmnt4n
Documentation fixes.
63150ef
@bnjmnt4n
Bump to v4.17.20.
ded9bc6
@stof @bnjmnt4n
Prevent command injection through _.template's variable option
3469357 
Closes #5085.
@falsyvalues @bnjmnt4n
Improve performance of toNumber, trim and trimEnd on large inpu…
c4847eb 
…t strings

This prevents potential ReDoS attacks using `_.toNumber` and `_.trim*`
as potential attack vectors.

Closes #5065.
@bnjmnt4n
Bump to v4.17.21
f299b52
@qiudaoermu qiudaoermu closed this Aug 29, 2021
123456789-bb
123456789-bb reviewed Oct 14, 2021
View reviewed changes
Copy link

@123456789-bb 123456789-bb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok good

Ziqhoulets
Ziqhoulets reviewed Mar 20, 2022
View reviewed changes
Copy link

@Ziqhoulets Ziqhoulets left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TBXnS5pXuYBwDNPQMdExPBruHZSmtNiqtX

@lodash lodash locked and limited conversation to collaborators Mar 25, 2022
@jdalton jdalton added the issue bankruptcy Closing the issue/PR to start fresh label Sep 16, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@123456789-bb 123456789-bb 123456789-bb left review comments

@Ziqhoulets Ziqhoulets Ziqhoulets left review comments

Assignees
No one assigned
Labels
issue bankruptcy Closing the issue/PR to start fresh
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet