From dd446baed89746bb3711970fe49b1e458ce62e89 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 15 Jul 2025 16:28:41 +0000
Subject: [PATCH] fix: upgrade package-lock from 1.0.3 to 1.0.5

Snyk has created this PR to upgrade package-lock from 1.0.3 to 1.0.5.

See this package in npm:
package-lock

See this project in Snyk:
https://app.snyk.io/org/snapp949/project/b62f72c3-e17a-40bc-ae9f-11b336583a64?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 package-lock.json | 29 ++++++++++++++++++++++-------
 package.json      |  2 +-
 2 files changed, 23 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index d0ef42c4a..2fe07e1d2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "@actions/core": "1.9.1",
         "@actions/exec": "^1.0.1",
         "@actions/io": "^1.0.1",
-        "package-lock": "^1.0.3"
+        "package-lock": "^1.0.5"
       },
       "devDependencies": {
         "@types/jest": "^29.2.4",
@@ -1452,7 +1452,9 @@
       "license": "MIT"
     },
     "node_modules/commander": {
-      "version": "5.1.0",
+      "version": "6.2.1",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-6.2.1.tgz",
+      "integrity": "sha512-U7VdrJFnJgo4xjrHpTzu0yrHPGImdsmD95ZlgYSEajAn2JKzDhDTPG9kBTefmObL2w/ngeZnilk+OV9CG3d7UA==",
       "license": "MIT",
       "engines": {
         "node": ">= 6"
@@ -2556,8 +2558,11 @@
         "node": ">=8"
       }
     },
-    "node_modules/lodash": {
-      "version": "4.17.21",
+    "node_modules/lodash.get": {
+      "version": "4.4.2",
+      "resolved": "https://registry.npmjs.org/lodash.get/-/lodash.get-4.4.2.tgz",
+      "integrity": "sha512-z+Uw/vLuy6gQe8cfaFWD7p0wVv8fJl3mbzXh33RS+0oW2wvUqiRXiQ69gLWSLpgB5/6sU+r6BlQR0MBILadqTQ==",
+      "deprecated": "This package is deprecated. Use the optional chaining (?.) operator instead.",
       "license": "MIT"
     },
     "node_modules/lodash.memoize": {
@@ -2565,6 +2570,13 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/lodash.pick": {
+      "version": "4.4.0",
+      "resolved": "https://registry.npmjs.org/lodash.pick/-/lodash.pick-4.4.0.tgz",
+      "integrity": "sha512-hXt6Ul/5yWjfklSGvLQl8vM//l3FtyHZeuelpzK6mm99pNvN9yTDruNZPEJZD1oWrqo+izBmB7oUfWgcCX7s4Q==",
+      "deprecated": "This package is deprecated. Use destructuring assignment syntax instead.",
+      "license": "MIT"
+    },
     "node_modules/lru-cache": {
       "version": "6.0.0",
       "dev": true,
@@ -2746,13 +2758,16 @@
       }
     },
     "node_modules/package-lock": {
-      "version": "1.0.3",
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/package-lock/-/package-lock-1.0.5.tgz",
+      "integrity": "sha512-Bdhyy7R49UGjUakYPGKiQXMaWeUCJdDWAz9M+4FFIB9tGgmKI3vVlVPIiQ90NOIFVM4hs/9ii46VSfB1q58xTQ==",
       "license": "Unlicense",
       "dependencies": {
         "asyncc": "^2.0.4",
-        "commander": "^5.0.0",
+        "commander": "^6.1.0",
         "glob": "^7.1.6",
-        "lodash": "^4.17.15",
+        "lodash.get": "^4.4.2",
+        "lodash.pick": "^4.4.0",
         "traverse": "^0.6.6"
       },
       "bin": {
diff --git a/package.json b/package.json
index 1ebd3012a..e537e1379 100644
--- a/package.json
+++ b/package.json
@@ -24,6 +24,6 @@
     "@actions/core": "1.9.1",
     "@actions/exec": "^1.0.1",
     "@actions/io": "^1.0.1",
-    "package-lock": "^1.0.3"
+    "package-lock": "^1.0.5"
   }
 }