Update lodash

[stereobooster]

Why

Github security alert doesn't take into account yarn.lock. In yarn.lock it already has proper version. Same goes for extend package

And it doesn't catch some alerts which yarn catches

yarn audit
yarn audit v1.13.0
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ handlebars                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.0.13                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @operational/scripts                                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @operational/scripts > webpack-dashboard > handlebars        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://nodesecurity.io/advisories/755                       │
└───────────────┴──────────────────────────────────────────────────────────────┘
1 vulnerabilities found - Packages audited: 491062
Severity: 1 High