Commitizen requires a vulnerable version of `lodash`

[Cipscis]

CVE-2025-13465 describes a moderate severity vulnerability which affects Lodash versions 4.0.0 through 4.17.22.

The latest version of Commitizen requires a pinned version 4.17.21 of Lodash, which is vulnerable. This should be updated to the patched version 4.17.23.

[denilsonsa]

See also: PR #1010

[michelact]

See also: PR #1010

I see the PR wasn't merged yet, any ETA on it?

[pgoodjohn]

#1010 merged