Bump lodash

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.12 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.12...4.17.21)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.21
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

javascript/ql/test/query-tests/Security/CWE-400/src-non-vulnerable-lodash/package.json

@@ -1,5 +1,5 @@
 {
     "dependencies": {
-        "lodash": "4.17.12"
+        "lodash": "4.17.21"
     }
 }