Bump dependencies

Test suite passes and looks good in manual testing. I'm curious though if the
lodash update has any chances that are incompatible.