fix: CVE-2020-8203 with lodash.pick

[andres-robinet-sw]

Addresses #4684
#minor

Description

This PR updates the version of lodash.pick and fixes the CVE-2020-8203 vulnerability.
There is no patch for lodash.pick@4.4.0 which is a dependency of nightwatch@2.6.21.
Per Method Packages are discouraged by lodash and nightwatch@3.4.0 fixes this.
However, there's a transitive dependency with jsdom@23.1.0 which restricts Node engines to >=18.
Thus, we need to force a fully patched version of lodash to replace lodash.pick.

Specific Changes

• Added resolution for lodash.pick to lodash@4.17.21

Testing

The following screenshot shows the updated version for the lodash.pick package.

[coveralls]

Pull Request Test Coverage Report for Build 9667643464

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage decreased (-0.4%) to 84.075%

---

Totals
Change from base Build 9665967289:	-0.4%
Covered Lines:	20343
Relevant Lines:	22900

---

💛 - Coveralls

[coveralls]

Pull Request Test Coverage Report for Build 9667643464

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 84.431%

---

Totals
Change from base Build 9665967289:	0.0%
Covered Lines:	20425
Relevant Lines:	22900

---

💛 - Coveralls