Update lodash dependency to ^4.17.11 (#297)

* update lodash dependency to ^4.17.11

* update changelog

Author: brandonhudavid

packages/optimizely-sdk/CHANGELOG.MD

@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 ## [Unreleased]
 Changes that have landed but are not yet released.
 
+- Updated lodash dependency to ^4.17.11 to address security vulnerabilities ([#296](https://github.com/optimizely/javascript-sdk/issues/296))
+
 ## [3.2.0] - May 30th, 2019
 
 ### New Features

packages/optimizely-sdk/package-lock.json

@@ -37,7 +37,7 @@
     "@optimizely/js-sdk-logging": "^0.1.0",
     "@optimizely/js-sdk-utils": "^0.1.0",
     "json-schema": "^0.2.3",
-    "lodash": "^4.0.0",
+    "lodash": "^4.17.11",
     "murmurhash": "0.0.2",
     "promise-polyfill": "8.1.0",
     "uuid": "^3.3.2"