Lock lru-cache package

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.5.4 - 2015-11-24
+
+- [fix] Lock lru-cache dependency to 2.7.0
+
 ## 1.5.3 - 2015-09-24
 
 - Revert auto sorting of bower dependencies, fixes ([#1897](https://github.com/bower/bower/issues/1897))

package.json

@@ -1,6 +1,6 @@
 {
   "name": "bower",
-  "version": "1.5.3",
+  "version": "1.5.4",
   "description": "The browser package manager",
   "author": "Twitter",
   "license": "MIT",
@@ -34,7 +34,7 @@
     "is-root": "^1.0.0",
     "junk": "^1.0.0",
     "lockfile": "^1.0.0",
-    "lru-cache": "^2.5.0",
+    "lru-cache": "2.7.0",
     "md5-hex": "^1.0.2",
     "mkdirp": "0.5.0",
     "mout": "^0.11.0",