From 31ecefe499245a3f8347bcf2d7f31d038f4955e7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 22 Jan 2026 03:10:15 +0000
Subject: [PATCH] Bump lodash from 4.17.21 to 4.17.23 in /mlflow/server/js

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 mlflow/server/js/package.json | 2 +-
 mlflow/server/js/yarn.lock    | 9 ++++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/mlflow/server/js/package.json b/mlflow/server/js/package.json
index 6b888613f553e..2ccb9649f3067 100644
--- a/mlflow/server/js/package.json
+++ b/mlflow/server/js/package.json
@@ -28,7 +28,7 @@
     "js-yaml": "^3.14.0",
     "json-bigint": "databricks/json-bigint#a1defaf9cd8dd749f0fd4d5f83a22cd846789658",
     "leaflet": "^1.5.1",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "moment": "^2.24.0",
     "plotly.js": "1.50.0",
     "prop-types": "^15.7.2",
diff --git a/mlflow/server/js/yarn.lock b/mlflow/server/js/yarn.lock
index e4e3b48fe9f92..9f64b22a82c3f 100644
--- a/mlflow/server/js/yarn.lock
+++ b/mlflow/server/js/yarn.lock
@@ -12842,7 +12842,7 @@ fsevents@~2.1.2:
     js-yaml: ^3.14.0
     json-bigint: "databricks/json-bigint#a1defaf9cd8dd749f0fd4d5f83a22cd846789658"
     leaflet: ^1.5.1
-    lodash: ^4.17.21
+    lodash: ^4.17.23
     moment: ^2.24.0
     plotly.js: 1.50.0
     prettier: ^1.19.1
@@ -13528,6 +13528,13 @@ fsevents@~2.1.2:
   languageName: node
   linkType: hard
 
+"lodash@npm:^4.17.23":
+  version: 4.17.23
+  resolution: "lodash@npm:4.17.23"
+  checksum: 7daad39758a72872e94651630fbb54ba76868f904211089721a64516ce865506a759d9ad3d8ff22a2a49a50a09db5d27c36f22762d21766e47e3ba918d6d7bab
+  languageName: node
+  linkType: hard
+
 "loglevel@npm:^1.4.1":
   version: 1.6.8
   resolution: "loglevel@npm:1.6.8"