fix: dependabot alerts with compatible patches

cr: https://code.amazon.com/reviews/CR-135683249

addons/addon-base/packages/services-container/package.json

@@ -11,7 +11,7 @@
   },
   "peerDependencies": {
     "aws-sdk": "^2.1000.0",
-    "lodash": "*"
+    "lodash": "^4.17.21"
   },
   "devDependencies": {
     "eslint": "^6.8.0",
@@ -45,4 +45,4 @@
       "pre-commit": "pretty-quick --staged --pattern '**/*.*(js|jsx)'"
     }
   }
-}
+}

package.json

@@ -96,7 +96,19 @@
       "xml2js": "0.5.0",
       "react-refresh": "0.11.0",
       "crypto-js": "4.2.0",
-      "browserify-sign": "4.2.2"
+      "browserify-sign": "4.2.2",
+      "yargs-parser@<=5.0.0": "5.0.1",
+      "browserslist@>=4.0.0 <4.16.5": "4.16.5",
+      "webpack-dev-middleware@<=5.3.3": "5.3.4",
+      "express@<4.19.2": "4.19.2",
+      "follow-redirects@<=1.15.5": "1.15.6",
+      "tar@<6.2.1": "6.2.1",
+      "braces@<3.0.3": "3.0.3",
+      "ws@>=8.0.0 <8.17.1": ">=8.17.1",
+      "ws@>=7.0.0 <7.5.10": ">=7.5.10",
+      "ws@>=6.0.0 <6.2.3": ">=6.2.3",
+      "ajv@<6.12.3": ">=6.12.3",
+      "lodash": "4.17.21"
     }
   }
-}
+}