Merge pull request #6308 from github/security/bump-deps-vuln-192979

Bump lodash to >= 4.18.0 (security)

Author: jencarlucci

package-lock.json

@@ -10,10 +10,15 @@
     "lint": "eslint descriptions/**/*.json --ext .json"
   },
   "eslintConfig": {
-    "extends": ["plugin:json/recommended"]
+    "extends": [
+      "plugin:json/recommended"
+    ]
   },
   "devDependencies": {
     "eslint": "^8.13.0",
     "eslint-plugin-json": "^3.1.0"
+  },
+  "overrides": {
+    "lodash": ">=4.18.0"
   }
 }