housekeeping: bump minimum lodash version (via #5156)

* Update lodash

fix for Regular Expression Denial of Service:
https://snyk.io/vuln/SNYK-JS-LODASH-73639

* update lockfile

package.json

@@ -59,7 +59,7 @@
     "ieee754": "^1.1.8",
     "immutable": "^3.x.x",
     "js-file-download": "^0.4.1",
-    "lodash": "^4.17.10",
+    "lodash": "^4.17.11",
     "memoizee": "^0.4.12",
     "prop-types": "^15.5.10",
     "react": "^15.6.2",