upgrade ganache-core 2.5.7 -> 2.6.1 to avoid vuln in lodash …
ganache-core ~2.5.7 has a hard dependency on lodash 4.17.11, which has a high-severity vulnerablity. We can upgrade to ganache-core 2.6.1 to resolve the issue and finally remove the vulnerable version of lodash from the dependency tree.