Merge #944

944: Update dependency lodash to v4.17.13 [SECURITY] r=rehandalal a=renovate[bot]

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [lodash](https://lodash.com/) ([source](https://togithub.com/lodash/lodash)) | dependencies | patch | [`4.17.11` -> `4.17.13`](https://renovatebot.com/diffs/npm/lodash/4.17.11/4.17.13) |

### GitHub Vulnerability Alerts

#### [CVE-2019-10744](https://togithub.com/lodash/lodash/pull/4336)

Affected versions of lodash are vulnerable to Prototype Pollution. 
The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.


Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Rehan Dalal <rehandalal@gmail.com>

package.json

@@ -43,7 +43,7 @@
     "immutable": "3.8.2",
     "less": "3.9.0",
     "less-loader": "5.0.0",
-    "lodash": "4.17.11",
+    "lodash": "4.17.13",
     "object-assign": "4.1.1",
     "postcss-flexbugs-fixes": "4.1.0",
     "postcss-loader": "3.0.0",