Lock lru-cache package

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.5.4 - 2015-11-24
+
+- [fix] Lock lru-cache dependency to 2.7.0
+
 ## 1.4.1 - 2015-04-01
 
 - [fix] Reading .bowerrc upwards directory tree ([#1763](https://github.com/bower/bower/issues/1763))

package.json

@@ -1,6 +1,6 @@
 {
   "name": "bower",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "The browser package manager",
   "author": "Twitter",
   "licenses": [
@@ -39,7 +39,7 @@
     "is-root": "^1.0.0",
     "junk": "^1.0.0",
     "lockfile": "^1.0.0",
-    "lru-cache": "^2.5.0",
+    "lru-cache": "2.7.0",
     "mkdirp": "0.5.0",
     "mout": "^0.11.0",
     "nopt": "^3.0.1",