npm-check-fork is pinning an older version of lodash, which now has a security issue

[kgetz-arista]

lodash 4.17.x is being used here: https://github.com/microsoft/rushstack/blob/main/libraries/npm-check-fork/package.json#L45

However, that version now has multiple security issues:

GHSA-r5fr-rjxr-66jc
GHSA-f23m-r3pf-42rh

Recommendation: use ^ for version ranges, not ~. I see that a similar issue (#5742) was filed against another package in the repo.

[mansiverma897993]

kgetz-arista Review PR at once let me know if any changes required?

[iclanton]

#5744 addresses this.

MAN$I VERMA (@mansiverma897993) - you need to update it everyhwere in the repo in your PR, and you need to run rush update and rush change and generate changelog entries.