Replace lodash.template with template from lodash to avoid dependabot alerts

[elrob]

lodash/lodash#5851

GHSA-35jh-r3h4-6jhm

Should be as simple as replacing the package to lodash or lodash-es and changing the import.

esbuild-plugin-html/package.json

Line 37 in 8aab0e2

"lodash.template": "^4.5.0"

[craftamap]

Thanks @severian for fixing this in #59 :^)

[elrob]

Thank you!

[elrob]

@craftamap Are you able to publish a new release including the lodash dependency change?

[craftamap]

done, v0.7.0 got released:)

[elrob]

Thank you!

[jacwright]

0.7.0 is outputting the template tags in my HTML. Is anyone else seeing this?

Example output of my page:

<link.../>
<% if (process.env.NODE_ENV === 'production') { %>
<script>...</script>
<% } %>

turns into this:

<link.../>
&lt;% if (process.env.NODE_ENV === 'production') { %&gt;
<script>...</script>
&lt;% } %&gt;

0.6.1 works fine.

[elrob]

I didn't see any issues but that's probably because I don't have any templating, just a static HTML snippet.