Merge pull request #2115 from ligangty/2.7.x

merge from master for js version bump security fix

Author: ligangty

uis/layover/package-lock.json

@@ -26,7 +26,7 @@
     "webpack": "^4.34.0",
     "webpack-cli": "^3.3.4",
     "webpack-dev-server": "^3.7.1",
-    "lodash": ">=4.17.13"
+    "lodash": ">=4.17.21"
   },
   "engines": {
     "node": ">=0.10.0"