GitHub reports a CVE because of lodash.pick in this plugin about vite-plugin-checker

[daniluk4000]

@fi3ework can you please take a look on this?

[Kegulf]

Bump

[fi3ework]

0.6.4 released which removed lodash-es by #303.

[serdec]

we are using vite-plugin-checker and the lodash update is causing our build to fail with the following error:

Error [ERR_REQUIRE_ESM]: require() of ES Module /code/***/node_modules/lodash-es/lodash.js from /code/***/node_modules/vite-plugin-checker/dist/cjs/main.js not supported.
#44 6.460 Instead change the require of lodash.js in /code/***/node_modules/vite-plugin-checker/dist/cjs/main.js to a dynamic import() which is available in all CommonJS modules.
#44 6.460     at _require.extensions.<computed> [as .js] (file:///code/***/node_modules/vite/dist/node/chunks/dep-52909643.js:66353:17)
#44 6.460     at Object.<anonymous> (/code/***/node_modules/vite-plugin-checker/dist/cjs/main.js:36:24)
#44 6.460     at _require.extensions.<computed> [as .js] (file:///code/***/node_modules/vite/dist/node/chunks/dep-52909643.js:66353:17)
#44 6.500 error Command failed with exit code 1.

[aszmyd]

we are using vite-plugin-checker and the lodash update is causing our build to fail with the following error:

Error [ERR_REQUIRE_ESM]: require() of ES Module /code/***/node_modules/lodash-es/lodash.js from /code/***/node_modules/vite-plugin-checker/dist/cjs/main.js not supported.
#44 6.460 Instead change the require of lodash.js in /code/***/node_modules/vite-plugin-checker/dist/cjs/main.js to a dynamic import() which is available in all CommonJS modules.
#44 6.460     at _require.extensions.<computed> [as .js] (file:///code/***/node_modules/vite/dist/node/chunks/dep-52909643.js:66353:17)
#44 6.460     at Object.<anonymous> (/code/***/node_modules/vite-plugin-checker/dist/cjs/main.js:36:24)
#44 6.460     at _require.extensions.<computed> [as .js] (file:///code/***/node_modules/vite/dist/node/chunks/dep-52909643.js:66353:17)
#44 6.500 error Command failed with exit code 1.

Same here

[nclavaud]

The use of per method packages (like lodash.pick) is now discouraged (see https://lodash.com/per-method-packages) and the recommended way is to upgrade the main lodash package.

[laug]

Bump @fi3ework

[ddssouza]

we are using vite-plugin-checker and the lodash update is causing our build to fail with the following error:

Error [ERR_REQUIRE_ESM]: require() of ES Module /code/***/node_modules/lodash-es/lodash.js from /code/***/node_modules/vite-plugin-checker/dist/cjs/main.js not supported.
#44 6.460 Instead change the require of lodash.js in /code/***/node_modules/vite-plugin-checker/dist/cjs/main.js to a dynamic import() which is available in all CommonJS modules.
#44 6.460     at _require.extensions.<computed> [as .js] (file:///code/***/node_modules/vite/dist/node/chunks/dep-52909643.js:66353:17)
#44 6.460     at Object.<anonymous> (/code/***/node_modules/vite-plugin-checker/dist/cjs/main.js:36:24)
#44 6.460     at _require.extensions.<computed> [as .js] (file:///code/***/node_modules/vite/dist/node/chunks/dep-52909643.js:66353:17)
#44 6.500 error Command failed with exit code 1.

Same

[fi3ework]

I'm removing lodash from dependency and release a new version now.