Merge pull request #120 from overleaf/dependabot/npm_and_yarn/lodash-4.17.13

Bump lodash from 4.17.4 to 4.17.13

services/document-updater/package-lock.json

@@ -1494,9 +1494,9 @@
       "integrity": "sha1-SjGI1CkbZrT2XtuZ+AaqmuKTWSo="
     },
     "lodash": {
-      "version": "4.17.4",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz",
-      "integrity": "sha1-eCA6TRwyiuHYbcpkYONptX9AVa4="
+      "version": "4.17.13",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.13.tgz",
+      "integrity": "sha512-vm3/XWXfWtRua0FkUyEHBZy8kCPjErNBT9fJx8Zvs+U6zjqPbTUOpkaoum3O5uiA8sm+yNMHXfYkTUHFoMxFNA=="
     },
     "lodash.defaults": {
       "version": "4.2.0",

services/document-updater/package.json

@@ -23,7 +23,7 @@
     "async": "^2.5.0",
     "coffee-script": "~1.7.0",
     "express": "3.11.0",
-    "lodash": "^4.17.4",
+    "lodash": "^4.17.13",
     "logger-sharelatex": "^1.7.0",
     "lynx": "0.0.11",
     "metrics-sharelatex": "^2.2.0",