📦 (deps-dev) lodash@4.17.23 [SECURITY] [skip ci] (#2515)

<!-- COMMIT_BODY_TEXT_BEGIN -->

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Adoption](https://docs.renovatebot.com/merge-confidence/) |
[Passing](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [lodash](https://lodash.com/)
([source](https://redirect.github.com/lodash/lodash)) | [`4.17.21` →
`4.17.23`](https://renovatebot.com/diffs/npm/lodash/4.17.21/4.17.23) |
![age](https://developer.mend.io/api/mc/badges/age/npm/lodash/4.17.23?slim=true)
|
![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/lodash/4.17.23?slim=true)
|
![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/lodash/4.17.21/4.17.23?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lodash/4.17.21/4.17.23?slim=true)
|

### GitHub Vulnerability Alerts

####
[CVE-2025-13465](https://redirect.github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg)

### Impact

Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype
pollution in the `_.unset` and `_.omit` functions. An attacker can pass
crafted paths which cause Lodash to delete methods from global
prototypes.

The issue permits deletion of properties but does not allow overwriting
their original behavior.

### Patches

This issue is patched on 4.17.23.

---

### Release Notes

<details>
<summary>lodash/lodash (lodash)</summary>

###
[`v4.17.23`](https://redirect.github.com/lodash/lodash/compare/0082be44648961341600e879042f74cd29d65d05...4.17.23)

[Compare
Source](https://redirect.github.com/lodash/lodash/compare/4.17.21...4.17.23)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

<!-- COMMIT_BODY_TEXT_END -->

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi44NS4xIiwidXBkYXRlZEluVmVyIjoiNDIuODUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsi8J+Tpu+4jyBEZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

config/eslint-config/package.json

@@ -40,7 +40,7 @@
   },
   "devDependencies": {
     "@types/lodash": "4.17.23",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "storybook": "9.1.17",
     "tailwindcss": "4.1.18",
     "typescript": "5.9.3"

package.json

@@ -56,7 +56,7 @@
     "dotenv": "17.2.3",
     "is-ci": "4.1.0",
     "lint-staged": "16.2.7",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "semantic-release": "25.0.2",
     "syncpack": "14.0.0-alpha.34",
     "tsdown": "0.15.12",

packages/conventional-gitmoji/package.json

@@ -41,7 +41,7 @@
   "devDependencies": {
     "@types/lodash": "4.17.23",
     "gitmojis": "3.15.0",
-    "lodash": "4.17.21"
+    "lodash": "4.17.23"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"

packages/design-system/package.json

@@ -109,7 +109,7 @@
     "@types/lodash": "4.17.23",
     "cmdk": "1.1.1",
     "framer-motion": "12.25.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "next": "15.5.9",
     "react": "19.0.0-rc-66855b96-20241106",
     "react-dom": "19.0.0-rc-66855b96-20241106",

packages/notion/package.json

@@ -46,7 +46,7 @@
   "devDependencies": {
     "@jeromefitz/utils": "workspace:*",
     "@types/lodash": "4.17.23",
-    "lodash": "4.17.21"
+    "lodash": "4.17.23"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"

packages/release-notes-generator/package.json

@@ -43,7 +43,7 @@
   },
   "devDependencies": {
     "@types/lodash": "4.17.23",
-    "lodash": "4.17.21"
+    "lodash": "4.17.23"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"

packages/spotify/package.json

@@ -43,7 +43,7 @@
   "devDependencies": {
     "@jeromefitz/utils": "workspace:*",
     "@types/lodash": "4.17.23",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "sharp": "0.32.6"
   },
   "publishConfig": {

packages/utils/package.json

@@ -38,7 +38,7 @@
   },
   "devDependencies": {
     "@types/lodash": "4.17.23",
-    "lodash": "4.17.21"
+    "lodash": "4.17.23"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"