From 93cb7c34a7f1d0756b33e6c11204efb090faba78 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 22 Jan 2026 00:26:01 +0000
Subject: [PATCH] Bump the external-miscellaneous group across 1 directory with
 2 updates

Bumps the external-miscellaneous group with 2 updates in the / directory: [backbone](https://github.com/jashkenas/backbone) and [lodash](https://github.com/lodash/lodash).


Updates `backbone` from 1.6.0 to 1.6.1
- [Commits](https://github.com/jashkenas/backbone/compare/1.6.0...1.6.1)

Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: backbone
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external-miscellaneous
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external-miscellaneous
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 18 ++++++++++--------
 package.json      |  4 ++--
 2 files changed, 12 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 7ccfb94199dca..463f6438b158b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -77,7 +77,7 @@
 				"@wordpress/warning": "3.19.1",
 				"@wordpress/widgets": "4.19.6",
 				"@wordpress/wordcount": "4.19.1",
-				"backbone": "1.6.0",
+				"backbone": "1.6.1",
 				"clipboard": "2.0.11",
 				"core-js-url-browser": "3.6.4",
 				"element-closest": "3.0.2",
@@ -89,7 +89,7 @@
 				"jquery-form": "4.3.0",
 				"jquery-hoverintent": "1.10.2",
 				"json2php": "0.0.12",
-				"lodash": "4.17.21",
+				"lodash": "4.17.23",
 				"masonry-layout": "4.2.2",
 				"moment": "2.30.1",
 				"objectFitPolyfill": "2.3.5",
@@ -10928,9 +10928,10 @@
 			}
 		},
 		"node_modules/backbone": {
-			"version": "1.6.0",
-			"resolved": "https://registry.npmjs.org/backbone/-/backbone-1.6.0.tgz",
-			"integrity": "sha512-13PUjmsgw/49EowNcQvfG4gmczz1ximTMhUktj0Jfrjth0MVaTxehpU+qYYX4MxnuIuhmvBLC6/ayxuAGnOhbA==",
+			"version": "1.6.1",
+			"resolved": "https://registry.npmjs.org/backbone/-/backbone-1.6.1.tgz",
+			"integrity": "sha512-YQzWxOrIgL6BoFnZjThVN99smKYhyEXXFyJJ2lsF1wJLyo4t+QjmkLrH8/fN22FZ4ykF70Xq7PgTugJVR4zS9Q==",
+			"license": "MIT",
 			"dependencies": {
 				"underscore": ">=1.8.3"
 			}
@@ -24843,9 +24844,10 @@
 			}
 		},
 		"node_modules/lodash": {
-			"version": "4.17.21",
-			"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-			"integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+			"version": "4.17.23",
+			"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
+			"integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==",
+			"license": "MIT"
 		},
 		"node_modules/lodash-es": {
 			"version": "4.17.21",
diff --git a/package.json b/package.json
index f84e4eb04055e..f529c3795bf9d 100644
--- a/package.json
+++ b/package.json
@@ -143,7 +143,7 @@
 		"@wordpress/warning": "3.19.1",
 		"@wordpress/widgets": "4.19.6",
 		"@wordpress/wordcount": "4.19.1",
-		"backbone": "1.6.0",
+		"backbone": "1.6.1",
 		"clipboard": "2.0.11",
 		"core-js-url-browser": "3.6.4",
 		"element-closest": "3.0.2",
@@ -155,7 +155,7 @@
 		"jquery-form": "4.3.0",
 		"jquery-hoverintent": "1.10.2",
 		"json2php": "0.0.12",
-		"lodash": "4.17.21",
+		"lodash": "4.17.23",
 		"masonry-layout": "4.2.2",
 		"moment": "2.30.1",
 		"objectFitPolyfill": "2.3.5",