Lodash vulnerability

Here we go again.

• NPM advisory
• HackerOne report
• GitHub issue
• First GitHub PR (closed), Second GitHub PR (merged)

This issue relates to zipObjectDeep, which is used by neither our own code nor our dependencies, so we are not affected at all. This just causes warnings in CI…