Update packages to depend on stable lodash

This bumps the lowest allowed lodash version to be the first stable release. Also I thought it might be good to make sure that eventemitter2 has the latest patches.