Security issue from lodash via grunt-legacy-log-utils

[brettz9]

As a result of issues for dependencies grunt-legacy-util and grunt-legacy-log -> grunt-legacy-log-utils, npm's new npm audit flags grunt with these problems (and any repo depending on grunt).

It would be great to have these two issues fixed (with upgrades to the lodash version in use).

Thanks!

[jbruni]

Indeed... we'll need new releases for grunt, grunt-legacy-util, grunt-legacy-log and grunt-legacy-log-utils, in order to have npm audit to cease reporting about lodash when we install grunt.

Thanks in advance.

[vladikoff]

@brettz9 @jbruni we are gonna attempt to fix this up in the next few days

[vladikoff]

Quick update, I'm blocked by npm issues in gruntjs/grunt-legacy-log-utils#5

Will have to wait until @shama comes back from camp.

[RinkAttendant6]

Great work on the fixes 🎉

I assume an npm tag and release are coming soon?

[brettz9]

Indeed--how about an npm release? Thanks a lot!

[vladikoff]

Mostly waiting for this jshint/jshint#3283

[vladikoff]

will give another 2-3 biz day for a new jshint version, if that doesn't arrive then we will tag a new release