bump up lodash dep version