Bump lodash

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.4 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.4...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

javascript/ql/test/query-tests/Security/CWE-915/PrototypePollutingMergeCall/src-vulnerable-lodash/package.json

@@ -1,5 +1,5 @@
 {
     "dependencies": {
-        "lodash": "4.17.4"
+        "lodash": "4.17.23"
     }
 }