Bump Lodash version

[davidcui1225]

Issue #, if available:
N/A
Description of changes:
Bump lodash version to 4.17.21 to mitigate high-severity CVE for kibana-reports

By making a contribution to this project, I certify that:

(a) The contribution was created in whole or in part by me and I
have the right to submit it under the open source license
indicated in the file; or

(b) The contribution is based upon previous work that, to the best
of my knowledge, is covered under an appropriate open source
license and I have the right under that license to submit that
work with modifications, whether created in whole or in part
by me, under the same open source license (unless I am
permitted to submit under a different license), as indicated
in the file; or

(c) The contribution was provided directly to me by some other
person who certified (a), (b) or (c) and I have not modified
it.

(d) I understand and agree that this project and the contribution
are public and that a record of the contribution (including all
personal information I submit with it, including my sign-off) is
maintained indefinitely and may be redistributed consistent with
this project or the open source license(s) involved.

[codecov]

Codecov Report

Merging #334 (916da7e) into dev (ba7c8b7) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##                dev     #334   +/-   ##
=========================================
  Coverage     64.14%   64.14%           
  Complexity      291      291           
=========================================
  Files           100      100           
  Lines          4078     4078           
  Branches        622      622           
=========================================
  Hits           2616     2616           
  Misses         1302     1302           
  Partials        160      160           

Flag	Coverage Δ	Complexity Δ
Kibana-reports	77.37% <ø> (ø)	0.00 <ø> (ø)
reports-scheduler	53.28% <ø> (ø)	0.00 <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ba7c8b7...916da7e. Read the comment docs.

[zhongnansu]

Can you add a tag to these type of PR which fixs security issues?

[davidcui1225]

Can you add a tag to these type of PR which fixs security issues?

Yes, will add