Bump npm and lodash

package.json

@@ -86,7 +86,7 @@
     "mini-css-extract-plugin": "^0.7.0",
     "minimist": "^1.2.0",
     "node-sass": "^4.12.0",
-    "npm": "^6.4.1",
+    "npm": "^6.11.3",
     "po-loader": "^0.5.0",
     "po2json": "^1.0.0-alpha",
     "postcss-clean": "^1.1.0",

src/headless/package.json

@@ -26,7 +26,7 @@
     "backbone.browserStorage": "0.0.5",
     "filesize": "^4.1.2",
     "jed": "1.1.1",
-    "lodash": "^4.17.14",
+    "lodash": "^4.17.15",
     "pluggable.js": "2.0.1",
     "strophe.js": "1.3.4",
     "twemoji": "^12.1.2"