From 7c2c870ea91f70010a1ee6e79b501b9bc90c6832 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 9 Apr 2026 06:22:48 +0000
Subject: [PATCH] chore(deps): bump lodash from 4.17.23 to 4.18.1

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 examples/getstarted/package.json              |  2 +-
 examples/kitchensink/package.json             |  2 +-
 package.json                                  |  2 +-
 packages/cli/cloud/package.json               |  2 +-
 packages/cli/create-strapi-app/package.json   |  2 +-
 .../core/content-type-builder/package.json    |  2 +-
 packages/generators/generators/package.json   |  2 +-
 packages/plugins/documentation/package.json   |  2 +-
 packages/plugins/graphql/package.json         |  2 +-
 packages/plugins/i18n/package.json            |  2 +-
 .../plugins/users-permissions/package.json    |  2 +-
 .../providers/email-nodemailer/package.json   |  2 +-
 packages/providers/upload-aws-s3/package.json |  2 +-
 packages/utils/api-tests/package.json         |  2 +-
 packages/utils/logger/package.json            |  2 +-
 packages/utils/typescript/package.json        |  2 +-
 packages/utils/upgrade/package.json           |  2 +-
 yarn.lock                                     | 43 +++++++++++--------
 18 files changed, 42 insertions(+), 35 deletions(-)

diff --git a/examples/getstarted/package.json b/examples/getstarted/package.json
index 33034577b9b9..0e791538386c 100644
--- a/examples/getstarted/package.json
+++ b/examples/getstarted/package.json
@@ -25,7 +25,7 @@
     "@strapi/provider-upload-cloudinary": "workspace:*",
     "@strapi/strapi": "workspace:*",
     "better-sqlite3": "12.4.1",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "mysql2": "3.9.8",
     "passport-google-oauth2": "0.2.0",
     "pg": "8.11.1",
diff --git a/examples/kitchensink/package.json b/examples/kitchensink/package.json
index 02d2210e9387..e0581ac6d890 100644
--- a/examples/kitchensink/package.json
+++ b/examples/kitchensink/package.json
@@ -18,7 +18,7 @@
     "@strapi/provider-upload-cloudinary": "workspace:*",
     "@strapi/strapi": "workspace:*",
     "better-sqlite3": "12.4.1",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "mysql2": "3.9.8",
     "passport-google-oauth2": "0.2.0",
     "pg": "8.11.1",
diff --git a/package.json b/package.json
index e06d3217bfb7..94f2cdd5a586 100644
--- a/package.json
+++ b/package.json
@@ -155,7 +155,7 @@
     "jest-watch-typeahead": "2.2.2",
     "lerna": "8.2.0",
     "lint-staged": "15.2.10",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "npm-run-all": "4.1.5",
     "nx": "20.4.6",
     "plop": "4.0.1",
diff --git a/packages/cli/cloud/package.json b/packages/cli/cloud/package.json
index 76fe32df021f..5f2f6ba80d3b 100644
--- a/packages/cli/cloud/package.json
+++ b/packages/cli/cloud/package.json
@@ -59,7 +59,7 @@
     "inquirer": "8.2.5",
     "jsonwebtoken": "9.0.0",
     "jwks-rsa": "3.1.0",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "minimatch": "9.0.3",
     "open": "8.4.0",
     "ora": "5.4.1",
diff --git a/packages/cli/create-strapi-app/package.json b/packages/cli/create-strapi-app/package.json
index fb0ac81d20c0..d36c61bc47f8 100644
--- a/packages/cli/create-strapi-app/package.json
+++ b/packages/cli/create-strapi-app/package.json
@@ -57,7 +57,7 @@
     "execa": "5.1.1",
     "fs-extra": "11.2.0",
     "inquirer": "8.2.5",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "node-machine-id": "^1.1.10",
     "ora": "^5.4.1",
     "rollup": "4.19.1",
diff --git a/packages/core/content-type-builder/package.json b/packages/core/content-type-builder/package.json
index 593c931c48c4..6d70024492f4 100644
--- a/packages/core/content-type-builder/package.json
+++ b/packages/core/content-type-builder/package.json
@@ -76,7 +76,7 @@
     "fs-extra": "11.2.0",
     "immer": "9.0.21",
     "jszip": "^3.10.1",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "micromatch": "^4.0.8",
     "pluralize": "8.0.0",
     "qs": "6.14.1",
diff --git a/packages/generators/generators/package.json b/packages/generators/generators/package.json
index 4095b565771d..067debdc1279 100644
--- a/packages/generators/generators/package.json
+++ b/packages/generators/generators/package.json
@@ -56,7 +56,7 @@
     "fs-extra": "11.2.0",
     "handlebars": "4.7.7",
     "jscodeshift": "17.3.0",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "plop": "4.0.1",
     "pluralize": "8.0.0"
   },
diff --git a/packages/plugins/documentation/package.json b/packages/plugins/documentation/package.json
index eff050994ee0..efb6a0ed0fcd 100644
--- a/packages/plugins/documentation/package.json
+++ b/packages/plugins/documentation/package.json
@@ -69,7 +69,7 @@
     "fs-extra": "11.2.0",
     "immer": "9.0.21",
     "koa-static": "^5.0.0",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "path-to-regexp": "8.2.0",
     "react-intl": "6.6.2",
     "swagger-ui-dist": "4.19.0",
diff --git a/packages/plugins/graphql/package.json b/packages/plugins/graphql/package.json
index 0e201ca3156c..ce48571a3c3e 100644
--- a/packages/plugins/graphql/package.json
+++ b/packages/plugins/graphql/package.json
@@ -68,7 +68,7 @@
     "graphql-scalars": "1.22.2",
     "koa-bodyparser": "4.4.1",
     "koa-compose": "^4.1.0",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "nexus": "1.3.0",
     "pluralize": "8.0.0"
   },
diff --git a/packages/plugins/i18n/package.json b/packages/plugins/i18n/package.json
index 42789ccd379d..a765c7110d37 100644
--- a/packages/plugins/i18n/package.json
+++ b/packages/plugins/i18n/package.json
@@ -60,7 +60,7 @@
     "@strapi/design-system": "2.1.2",
     "@strapi/icons": "2.1.2",
     "@strapi/utils": "5.35.0",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "qs": "6.14.1",
     "react-intl": "6.6.2",
     "react-redux": "8.1.3",
diff --git a/packages/plugins/users-permissions/package.json b/packages/plugins/users-permissions/package.json
index edb00e2804bf..ef953b2236e1 100644
--- a/packages/plugins/users-permissions/package.json
+++ b/packages/plugins/users-permissions/package.json
@@ -59,7 +59,7 @@
     "jwk-to-pem": "2.0.5",
     "koa": "2.16.3",
     "koa2-ratelimit": "^1.1.3",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "prop-types": "^15.8.1",
     "purest": "4.0.2",
     "react-intl": "6.6.2",
diff --git a/packages/providers/email-nodemailer/package.json b/packages/providers/email-nodemailer/package.json
index 987ad2c816df..e4677208f0b0 100644
--- a/packages/providers/email-nodemailer/package.json
+++ b/packages/providers/email-nodemailer/package.json
@@ -57,7 +57,7 @@
     "watch": "run -T rollup -c -w"
   },
   "dependencies": {
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "nodemailer": "6.10.1"
   },
   "devDependencies": {
diff --git a/packages/providers/upload-aws-s3/package.json b/packages/providers/upload-aws-s3/package.json
index 6eac05246c2a..c53d292928a9 100644
--- a/packages/providers/upload-aws-s3/package.json
+++ b/packages/providers/upload-aws-s3/package.json
@@ -51,7 +51,7 @@
     "@aws-sdk/lib-storage": "3.975.0",
     "@aws-sdk/s3-request-presigner": "3.975.0",
     "@aws-sdk/types": "3.973.0",
-    "lodash": "4.17.23"
+    "lodash": "4.18.1"
   },
   "devDependencies": {
     "@types/jest": "29.5.2",
diff --git a/packages/utils/api-tests/package.json b/packages/utils/api-tests/package.json
index 66ecd654e94e..100b215dbc24 100644
--- a/packages/utils/api-tests/package.json
+++ b/packages/utils/api-tests/package.json
@@ -4,7 +4,7 @@
   "private": true,
   "dependencies": {
     "dotenv": "16.4.5",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "qs": "6.14.1",
     "supertest": "6.3.3"
   }
diff --git a/packages/utils/logger/package.json b/packages/utils/logger/package.json
index a7e12013cdcd..d94bd41a55a7 100644
--- a/packages/utils/logger/package.json
+++ b/packages/utils/logger/package.json
@@ -40,7 +40,7 @@
     "watch": "run -T rollup -c -w"
   },
   "dependencies": {
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "winston": "3.10.0"
   },
   "devDependencies": {
diff --git a/packages/utils/typescript/package.json b/packages/utils/typescript/package.json
index 930b626443ea..7fa39736edc4 100644
--- a/packages/utils/typescript/package.json
+++ b/packages/utils/typescript/package.json
@@ -38,7 +38,7 @@
     "chalk": "4.1.2",
     "cli-table3": "0.6.5",
     "fs-extra": "11.2.0",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "prettier": "3.3.3",
     "typescript": "5.4.4"
   },
diff --git a/packages/utils/upgrade/package.json b/packages/utils/upgrade/package.json
index 52882be4b045..7ab5c7a0ceb9 100644
--- a/packages/utils/upgrade/package.json
+++ b/packages/utils/upgrade/package.json
@@ -70,7 +70,7 @@
     "fast-glob": "3.3.2",
     "fs-extra": "11.2.0",
     "jscodeshift": "17.1.2",
-    "lodash": "4.17.23",
+    "lodash": "4.18.1",
     "memfs": "4.6.0",
     "ora": "5.4.1",
     "prompts": "2.4.2",
diff --git a/yarn.lock b/yarn.lock
index b65ff0e0a56b..76f1f9b1e114 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -9351,7 +9351,7 @@ __metadata:
     inquirer: "npm:8.2.5"
     jsonwebtoken: "npm:9.0.0"
     jwks-rsa: "npm:3.1.0"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     minimatch: "npm:9.0.3"
     open: "npm:8.4.0"
     ora: "npm:5.4.1"
@@ -9504,7 +9504,7 @@ __metadata:
     jszip: "npm:^3.10.1"
     koa: "npm:2.16.3"
     koa-body: "npm:6.0.1"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     micromatch: "npm:^4.0.8"
     pluralize: "npm:8.0.0"
     qs: "npm:6.14.1"
@@ -9794,7 +9794,7 @@ __metadata:
     fs-extra: "npm:11.2.0"
     handlebars: "npm:4.7.7"
     jscodeshift: "npm:17.3.0"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     outdent: "npm:^0.8.0"
     plop: "npm:4.0.1"
     pluralize: "npm:8.0.0"
@@ -9818,7 +9818,7 @@ __metadata:
     "@testing-library/react": "npm:16.3.0"
     "@testing-library/user-event": "npm:14.6.1"
     koa: "npm:2.16.3"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     msw: "npm:1.3.0"
     qs: "npm:6.14.1"
     react: "npm:18.3.1"
@@ -9856,7 +9856,7 @@ __metadata:
   resolution: "@strapi/logger@workspace:packages/utils/logger"
   dependencies:
     eslint-config-custom: "npm:5.35.0"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     tsconfig: "npm:5.35.0"
     winston: "npm:3.10.0"
   languageName: unknown
@@ -9998,7 +9998,7 @@ __metadata:
     koa-body: "npm:6.0.1"
     koa-session: "npm:6.4.0"
     koa-static: "npm:^5.0.0"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     msw: "npm:1.3.0"
     openapi-types: "npm:12.1.3"
     path-to-regexp: "npm:8.2.0"
@@ -10045,7 +10045,7 @@ __metadata:
     koa: "npm:2.16.3"
     koa-bodyparser: "npm:4.4.1"
     koa-compose: "npm:^4.1.0"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     nexus: "npm:1.3.0"
     pluralize: "npm:8.0.0"
     react: "npm:18.3.1"
@@ -10103,7 +10103,7 @@ __metadata:
     jwk-to-pem: "npm:2.0.5"
     koa: "npm:2.16.3"
     koa2-ratelimit: "npm:^1.1.3"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     msw: "npm:1.3.0"
     prop-types: "npm:^15.8.1"
     purest: "npm:4.0.2"
@@ -10155,7 +10155,7 @@ __metadata:
   dependencies:
     "@types/nodemailer": "npm:6.4.7"
     eslint-config-custom: "npm:5.35.0"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     nodemailer: "npm:6.10.1"
     tsconfig: "npm:5.35.0"
   languageName: unknown
@@ -10194,7 +10194,7 @@ __metadata:
     "@aws-sdk/types": "npm:3.973.0"
     "@types/jest": "npm:29.5.2"
     eslint-config-custom: "npm:5.35.0"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     tsconfig: "npm:5.35.0"
   languageName: unknown
   linkType: soft
@@ -10428,7 +10428,7 @@ __metadata:
     chalk: "npm:4.1.2"
     cli-table3: "npm:0.6.5"
     fs-extra: "npm:11.2.0"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     prettier: "npm:3.3.3"
     typescript: "npm:5.4.4"
   languageName: unknown
@@ -10483,7 +10483,7 @@ __metadata:
     fast-glob: "npm:3.3.2"
     fs-extra: "npm:11.2.0"
     jscodeshift: "npm:17.1.2"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     memfs: "npm:4.6.0"
     ora: "npm:5.4.1"
     prompts: "npm:2.4.2"
@@ -13797,7 +13797,7 @@ __metadata:
   resolution: "api-tests@workspace:packages/utils/api-tests"
   dependencies:
     dotenv: "npm:16.4.5"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     qs: "npm:6.14.1"
     supertest: "npm:6.3.3"
   languageName: unknown
@@ -16302,7 +16302,7 @@ __metadata:
     execa: "npm:5.1.1"
     fs-extra: "npm:11.2.0"
     inquirer: "npm:8.2.5"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     node-machine-id: "npm:^1.1.10"
     ora: "npm:^5.4.1"
     rollup: "npm:4.19.1"
@@ -20181,7 +20181,7 @@ __metadata:
     "@strapi/provider-upload-cloudinary": "workspace:*"
     "@strapi/strapi": "workspace:*"
     better-sqlite3: "npm:12.4.1"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     mysql2: "npm:3.9.8"
     passport-google-oauth2: "npm:0.2.0"
     pg: "npm:8.11.1"
@@ -23566,7 +23566,7 @@ __metadata:
     "@strapi/provider-upload-cloudinary": "workspace:*"
     "@strapi/strapi": "workspace:*"
     better-sqlite3: "npm:12.4.1"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     mysql2: "npm:3.9.8"
     passport-google-oauth2: "npm:0.2.0"
     pg: "npm:8.11.1"
@@ -24363,7 +24363,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"lodash@npm:4.17.23, lodash@npm:^4.17.10, lodash@npm:^4.17.20, lodash@npm:^4.17.21, lodash@npm:^4.17.4, lodash@npm:~4.17.15":
+"lodash@npm:4.18.1":
+  version: 4.18.1
+  resolution: "lodash@npm:4.18.1"
+  checksum: 10c0/757228fc68805c59789e82185135cf85f05d0b2d3d54631d680ca79ec21944ec8314d4533639a14b8bcfbd97a517e78960933041a5af17ecb693ec6eecb99a27
+  languageName: node
+  linkType: hard
+
+"lodash@npm:^4.17.10, lodash@npm:^4.17.20, lodash@npm:^4.17.21, lodash@npm:^4.17.4, lodash@npm:~4.17.15":
   version: 4.17.23
   resolution: "lodash@npm:4.17.23"
   checksum: 10c0/1264a90469f5bb95d4739c43eb6277d15b6d9e186df4ac68c3620443160fc669e2f14c11e7d8b2ccf078b81d06147c01a8ccced9aab9f9f63d50dcf8cace6bf6
@@ -31244,7 +31251,7 @@ __metadata:
     jest-watch-typeahead: "npm:2.2.2"
     lerna: "npm:8.2.0"
     lint-staged: "npm:15.2.10"
-    lodash: "npm:4.17.23"
+    lodash: "npm:4.18.1"
     npm-run-all: "npm:4.1.5"
     nx: "npm:20.4.6"
     plop: "npm:4.0.1"