Regenerate lockfile for lodash override

- Explicitly add lodash@4.18.1 to ensure override is respected
- Regenerated pnpm-lock.yaml with resolved lodash@4.18.1 (CVE fix)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

.github/workflows/dual-approval.yaml

@@ -16,3 +16,5 @@ jobs:
   dual-approval:
     uses: privilegedescalation/.github/.github/workflows/dual-approval-check.yaml@main
     secrets: inherit
+    with:
+      pr_number: ${{ github.event.pull_request.number }}

artifacthub-pkg.yml

@@ -1,4 +1,4 @@
-version: "1.0.1"
+version: "1.0.2"
 name: headlamp-rook-plugin
 displayName: Rook Plugin
 createdAt: "2026-02-18T00:00:00Z"
@@ -35,7 +35,7 @@ changes:
     description: "Renovate: extend org-level config preset and add pinDigests for SHA pinning of GitHub Actions"
 
 annotations:
-  headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-rook-plugin/releases/download/v1.0.1/rook-1.0.1.tar.gz"
-  headlamp/plugin/archive-checksum: sha256:36a62cda46194fd88335e3b3af12e7c89bb1ec21671c747e0bc2e1e3cd02d0fc
+  headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-rook-plugin/releases/download/v1.0.2/rook-1.0.2.tar.gz"
+  headlamp/plugin/archive-checksum: sha256:4f16cec3297968c7eb06e475a1c175503abf17134bd411fc86be1f18d9d27a48
   headlamp/plugin/distro-compat: ""
   headlamp/plugin/version-compat: ">=0.20"

package.json

@@ -1,6 +1,6 @@
 {
   "name": "rook",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Headlamp plugin for Rook-Ceph cluster visibility and CSI driver monitoring",
   "repository": {
     "type": "git",
@@ -35,6 +35,7 @@
     "@types/react-dom": "^18.0.0",
     "eslint": "^8.57.0",
     "jsdom": "^24.0.0",
+    "lodash": "4.18.1",
     "notistack": "^3.0.0",
     "prettier": "^2.8.8",
     "react": "^18.3.1",
@@ -45,6 +46,8 @@
   },
   "overrides": {
     "tar": "^7.5.11",
-    "undici": "^7.24.3"
+    "undici": "^7.24.3",
+    "vite": ">=6.4.2",
+    "lodash": ">=4.18.0"
   }
-}
+}