Update lodash version

[flyke]

If I run npm audit on a project using svg-sprite-generator, I get this security notice:

Moderate Prototype Pollution
Package lodash
Patched in >=4.17.11
Dependency of svg-sprite-generator [dev]
Path svg-sprite-generator > cheerio > lodash
More info https://npmjs.com/advisories/782

for security reasons, it would be better if svg-sprite-generator updates the lodash version of its dependencies

[flyke]

Edit: it is the cheerio requirement that includes lodash. Cheerio has a new version which fixes the vulnerability by requiring a higher lodash version.
svg-sprite-generator needs te require a higher version of cheerio to fix this.
(for example npm install cheerio@">1.0.0-rc.0" will install cheerio 1.0.0 release candidate 3 which requires lodash ^4.17.11 and fixes the vulnerability)

[pumano]

@flyke any news about it? looks like PR provided