Bump lodash and elasticsearch

Bumps [lodash](https://github.com/lodash/lodash) to 4.17.21 and updates ancestor dependency [elasticsearch](https://github.com/elastic/elasticsearch-js-legacy). These dependencies need to be updated together.


Updates `lodash` from 4.17.15 to 4.17.21
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.15...4.17.21)

Updates `elasticsearch` from 14.0.0 to 16.7.3
- [Release notes](https://github.com/elastic/elasticsearch-js-legacy/releases)
- [Changelog](https://github.com/elastic/elasticsearch-js-legacy/blob/16.x/docs/changelog.asciidoc)
- [Commits](https://github.com/elastic/elasticsearch-js-legacy/commits)

---
updated-dependencies:
- dependency-name: lodash
  dependency-type: indirect
- dependency-name: elasticsearch
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

package-lock.json

@@ -23,7 +23,7 @@
     "cookie-parser": "1.4.4",
     "ejs": "3.0.1",
     "ejs-mate": "3.0.0",
-    "elasticsearch": "14.0.0",
+    "elasticsearch": "16.7.3",
     "express": "4.17.3",
     "express-flash": "0.0.2",
     "express-rate-limit": "^5.3.0",