From acb511efca8a9c9b6056ed16748e53e2366ba912 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 3 Apr 2026 12:34:24 -0700
Subject: [PATCH 1/2] Bump flatted from 3.3.3 to 3.4.2 (#2431)

Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package-lock.json | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 54521d37a..2d0a44c7a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15510,9 +15510,10 @@
       }
     },
     "node_modules/flatted": {
-      "version": "3.3.3",
-      "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.3.3.tgz",
-      "integrity": "sha512-GX+ysw4PBCz0PzosHDepZGANEuFCMLrnRTiEy9McGjmkCQYwRq4A/X786G/fjM/+OjsWSU1ZrY5qyARZmO/uwg=="
+      "version": "3.4.2",
+      "resolved": "https://registry.npmjs.org/flatted/-/flatted-3.4.2.tgz",
+      "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==",
+      "license": "ISC"
     },
     "node_modules/follow-redirects": {
       "version": "1.15.11",
@@ -15859,7 +15860,6 @@
       "version": "2.3.2",
       "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz",
       "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==",
-      "dev": true,
       "hasInstallScript": true,
       "optional": true,
       "os": [

From 35be73dd6ebbae3aeca66ef2c8416051d4cf5bc1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 07:12:32 -0700
Subject: [PATCH 2/2] Bump underscore from 1.12.1 to 1.13.8 (#2407)

Bumps [underscore](https://github.com/jashkenas/underscore) from 1.12.1 to 1.13.8.
- [Commits](https://github.com/jashkenas/underscore/compare/1.12.1...1.13.8)

---
updated-dependencies:
- dependency-name: underscore
  dependency-version: 1.13.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package-lock.json | 6 ++++--
 package.json      | 2 +-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 2d0a44c7a..645ecde3b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -118,7 +118,7 @@
         "swr": "0.4.0",
         "terser-webpack-plugin": "5.3.9",
         "tinykeys": "2.1.0",
-        "underscore": "1.12.1",
+        "underscore": "1.13.8",
         "utility-types": "3.10.0",
         "uuid": "9.0.0",
         "web-vitals": "4.2.4",
@@ -27581,7 +27581,9 @@
       }
     },
     "node_modules/underscore": {
-      "version": "1.12.1",
+      "version": "1.13.8",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.13.8.tgz",
+      "integrity": "sha512-DXtD3ZtEQzc7M8m4cXotyHR+FAS18C64asBYY5vqZexfYryNNnDc02W4hKg3rdQuqOYas1jkseX0+nZXjTXnvQ==",
       "license": "MIT"
     },
     "node_modules/undici-types": {
diff --git a/package.json b/package.json
index 8b1faaa20..efbf8853e 100644
--- a/package.json
+++ b/package.json
@@ -113,7 +113,7 @@
     "swr": "0.4.0",
     "terser-webpack-plugin": "5.3.9",
     "tinykeys": "2.1.0",
-    "underscore": "1.12.1",
+    "underscore": "1.13.8",
     "utility-types": "3.10.0",
     "uuid": "9.0.0",
     "web-vitals": "4.2.4",