chore: bump lodash to ^4.17.15 to fix vulnerability (#1297)

Fixes #1275

Author: lmillucci

package.json

@@ -51,7 +51,7 @@
     "flow-bin": "^0.66.0",
     "jsdom": "^12.0.0",
     "jsdom-global": "^3.0.2",
-    "karma": "^1.7.0",
+    "karma": "^3.1.4",
     "karma-mocha": "^1.3.0",
     "karma-phantomjs-launcher": "^1.0.4",
     "karma-sinon-chai": "^2.0.2",

packages/test-utils/package.json

@@ -39,7 +39,7 @@
   },
   "dependencies": {
     "dom-event-types": "^1.0.0",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.15",
     "pretty": "^2.0.0"
   }
 }