From 487e50155a69ace542ea8b31765823f6016ac7ee Mon Sep 17 00:00:00 2001
From: "transcend-renovate[bot]"
 <284064598+transcend-renovate[bot]@users.noreply.github.com>
Date: Mon, 18 May 2026 16:05:40 +0000
Subject: [PATCH 1/2] Update dependency lodash-es to v4.18.1 [SECURITY]

---
 pnpm-lock.yaml      | 13 ++++++++-----
 pnpm-workspace.yaml |  2 ++
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 30644769..031f7ae3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -27,6 +27,9 @@ catalogs:
     husky:
       specifier: ^9.1.7
       version: 9.1.7
+    lodash-es:
+      specifier: ^4.18.1
+      version: 4.18.1
     oxfmt:
       specifier: ^0.38.0
       version: 0.38.0
@@ -224,7 +227,7 @@ importers:
         version: 9.0.3
       lodash-es:
         specifier: ^4.17.21
-        version: 4.17.23
+        version: 4.18.1
       monocle-ts:
         specifier: ^2.3.13
         version: 2.3.13(fp-ts@2.16.11)
@@ -767,7 +770,7 @@ importers:
         version: 2.2.22(fp-ts@2.16.11)
       lodash-es:
         specifier: ^4.17.21
-        version: 4.17.23
+        version: 4.18.1
       semver:
         specifier: 'catalog:'
         version: 7.7.4
@@ -2954,8 +2957,8 @@ packages:
     resolution: {integrity: sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==}
     engines: {node: '>=8'}
 
-  lodash-es@4.17.23:
-    resolution: {integrity: sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==}
+  lodash-es@4.18.1:
+    resolution: {integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==}
 
   lodash.escaperegexp@4.1.2:
     resolution: {integrity: sha512-TM9YBvyC84ZxE3rgfefxUWiQKLilstD6k7PTGt6wfbtXF8ixIJLOL3VYyV/z+ZiPLsVxAsKAFVwWlWeb2Y8Yyw==}
@@ -6211,7 +6214,7 @@ snapshots:
     dependencies:
       p-locate: 4.1.0
 
-  lodash-es@4.17.23: {}
+  lodash-es@4.18.1: {}
 
   lodash.escaperegexp@4.1.2: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 87c7ddc0..9b601b65 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -26,6 +26,8 @@ catalog:
 minimumReleaseAge: 4320
 minimumReleaseAgeExclude:
   - '@transcend-io/*'
+  # Renovate security update: lodash-es@4.18.1
+  - lodash-es@4.18.1
 
 onlyBuiltDependencies:
   - esbuild

From 9904c6197ce46419172c02ea0e69ce6439b8ee1c Mon Sep 17 00:00:00 2001
From: Hunter Tunnicliff <hunter.tunnicliff@transcend.io>
Date: Mon, 18 May 2026 09:11:12 -0700
Subject: [PATCH 2/2] Remove from minimum release age list

---
 pnpm-lock.yaml      | 3 ---
 pnpm-workspace.yaml | 2 --
 2 files changed, 5 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 031f7ae3..e2237004 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -27,9 +27,6 @@ catalogs:
     husky:
       specifier: ^9.1.7
       version: 9.1.7
-    lodash-es:
-      specifier: ^4.18.1
-      version: 4.18.1
     oxfmt:
       specifier: ^0.38.0
       version: 0.38.0
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 9b601b65..87c7ddc0 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -26,8 +26,6 @@ catalog:
 minimumReleaseAge: 4320
 minimumReleaseAgeExclude:
   - '@transcend-io/*'
-  # Renovate security update: lodash-es@4.18.1
-  - lodash-es@4.18.1
 
 onlyBuiltDependencies:
   - esbuild