[Snyk] Fix for 1 vulnerabilities

[davidread]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json

⚠️ Warning

``` Failed to update the package-lock.json, please update manually before merging. ```

#### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **768/1000**
**Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5 | Prototype Pollution
[SNYK-JS-LODASH-6139239](https://snyk.io/vuln/SNYK-JS-LODASH-6139239) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: postal

The new version differs by 61 commits.

• daa0ca4 Merged #148. Prepping for v1.0.9
• 0ee8228 Merge branch 'master' of https://github.com/kamilbiela/postal.js into kamilbiela-master
• 4f74367 Finally merged #128 - removing unused bower.json version property
• a143f66 Update lodash to 4 and fix breaking change
• 5028b41 Prepping for v1.0.8
• 1b71bf6 Merge pull request #145 from ifandelse/defect-global-undefined
• 23eca6f Fixed #136, where global was undefined when setting prevPostal value for noConflict situations.
• edd4d3a Prepping for v1.0.7 - Updated README, package files, change log and build assets.
• 1ec4876 Merge pull request #134 from ifandelse/feature-logging-and-logo
• e09c766 Updated change log.
• b55c9c5 Added @ derickbailey to the package.json contributor list
• 2598d4a Added a `throw` when `ChannelDefinition.prototype.publish` is not passed a valid first argument.
• 5266154 Updated gulp build setup to run formatting on src and lib.
• 5b198e6 Merge pull request #133 from derickbailey/logo
• d5fd234 added logo file original and exports, updated readme w/ logo
• eb783d3 Prepped for v1.0.6
• 986514d Merge pull request #126 from ifandelse/feature-jscs-fix
• 03c2afa Updating jscs build settings to prevent line break before catch method
• 1b72147 Prepped for v1.0.5. Closes #124
• 41d0b0e Merge pull request #125 from ifandelse/feature-mindash-fix
• 50d2d1a Updating mindash to fix issue with missing context arg
• 80f4b27 Updated package files and changelog for v1.0.4
• ffd0aef Merge pull request #120 from ifandelse/fix-cache-lookup
• 4b8d9dd Fixing issue where subscriber lookup cache was failing to update once created

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/legal-aid-agency/project/a0ad42b9-20af-405e-a765-5a25fbae5482?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/legal-aid-agency/project/a0ad42b9-20af-405e-a765-5a25fbae5482?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"b1da690c-2412-4b33-82bf-d26a9fb28ba2","prPublicId":"b1da690c-2412-4b33-82bf-d26a9fb28ba2","dependencies":[{"name":"lodash","from":"2.4.1","to":"4.17.17"},{"name":"postal","from":"0.10.3","to":"1.0.9"}],"packageManager":"npm","projectPublicId":"a0ad42b9-20af-405e-a765-5a25fbae5482","projectUrl":"https://app.snyk.io/org/legal-aid-agency/project/a0ad42b9-20af-405e-a765-5a25fbae5482?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-LODASH-6139239"],"upgrade":["SNYK-JS-LODASH-6139239"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["pr-warning-shown","priorityScore"],"priorityScoreList":[768],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Prototype Pollution](https://learn.snyk.io/lesson/prototype-pollution/?loc=fix-pr)

[sonarcloud[bot]]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud