## Summary - Bumps `concurrently` from `^7.1.0` to `^9.0.0` - concurrently v9 dropped the `lodash` dependency entirely, resolving dependabot alerts for lodash code injection via `_.template` and prototype pollution via `_.unset`/`_.omit` ## Breaking changes in concurrently v8/v9 - **Node.js >=18 required** — we use Node 20, not affected - **`--max-processes` behavior change** — pending commands no longer execute after Ctrl+C interrupt. We don't use `--max-processes`, not affected - **API export change** — `import { concurrently }` and default export are now identical; raw version moved to `createConcurrently`. We only use the CLI binary, not affected - **`--help` no longer shows inline examples** — not affected ## Dependabot alerts resolved - [Alert #243](https://github.com/getsentry/rrweb/security/dependabot/243) (high) — lodash code injection via `_.template` - [Alert #242](https://github.com/getsentry/rrweb/security/dependabot/242) (medium) — lodash prototype pollution via `_.unset`/`_.omit` - [Alert #175](https://github.com/getsentry/rrweb/security/dependabot/175) (medium) — lodash prototype pollution 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Fix flakey cross-origin test in rrweb #175

Description

Metadata

Metadata

Assignees

Labels

Fields

Projects

Milestone

Relationships

Development

Issue actions