fix vulnerability reported by lodash

[ahan-m-a]

This PR fixes a high vulnerability reported by lodash and lodash-es
GHSA-r5fr-rjxr-66jc

[vercel]

@ahan-stark is attempting to deploy a commit to the Formik Team on Vercel.

A member of the Team first needs to authorize it.

[changeset-bot]

⚠️ No Changeset found

Latest commit: d4a8a73

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codesandbox-ci]

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

[ahan-m-a]

Hello @jaredpalmer, @quantizor

Can you please approve this PR?

Thank you

[hdidier]

Getting this in would be nice. The minimum version required in 2.4.9 is vulnerable and npm audit fix does not bump the version if other dev deps are still on the lower version.

[hackash]

Hey @jaredpalmer, @quantizor When you get a chance, could you take a look at this PR? Would be great to get it merged. Thanks!

[LianaTyan]

We really need this update due to the security vulnerability. Hope you can review and merge it soon.