package: update lodash to ^2.2