Bump lodash and dependency-cruiser in /assets

[dependabot]

Bumps lodash and dependency-cruiser. These dependencies needed to be updated together.
Updates lodash from 4.17.21 to 4.17.23

Commits

• dec55b7 Bump main to v4.17.23 (#6088)
• 19c9251 fix: setCacheHas JSDoc return type should be boolean (#6071)
• b5e6729 jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)
• edadd45 Prevent prototype pollution on baseUnset function
• 4879a7a doc: fix autoLink function, conversion of source links (#6056)
• 9648f69 chore: remove yarn.lock file (#6053)
• dfa407d ci: remove legacy configuration files (#6052)
• 156e196 feat: add renovate setup (#6039)
• 933e106 ci: add pipeline for Bun (#6023)
• 072a807 docs: update links related to Open JS Foundation (#5968)
• Additional commits viewable in compare view

Updates dependency-cruiser from 12.10.0 to 17.3.6

Release notes

Sourced from dependency-cruiser's releases.

v17.3.6

🐛 fixes

• cd6fe3af fix(report/dot): makes the dot 'flat' reporter respect collapse patterns

🧑‍🏭 refactoring

• d58c78ad/ e884b1e1/ 58c01d1d/ refactor: replace memoize with internal Maps (#1040)
• 464388c0 refactor(cache): uses more appropriate Set for remembering which cache contexts were initialized
• a4a7a807 refactor(report/teamcity): passes the flowId instead of memoizing it

📖 documentation

• 9ca0ab0b doc: various updates to type annotations
• f3648f61 doc(cli): refreshes the documentation of the configuration scaffolding template
• 1b12e61a doc(cli): documents the 'ndjson' logging/ progress format
• cd52da95 doc(cli): updates progress performance-log sample
• 54becb36 doc(report/teamcity): uses same filename pattern for typedefs as used elsewhere in the src tree

👷 maintenance

• 64d42f95 chore(npm): updates external devDependencies
• a3a41f16 chore: tweaks dependency-cruiser configuration
• f924f5c5 chore(LICENSE): 2026
• 0a82fc36 chore(main): logs the 'report from cache' step as part of the 'report' step
• 60981148 chore(ci): uses content based cache strategy as it's faster for our self-scan
• f9b8565e chore(ci): updates known violations
• 120cc755 chore(progress): adds runId and user & system totals to the ndjson listener output

v17.3.5

👷 maintenance

• 2c72a14f perf(enrich/orphan): optimizes the data structure it exercises upon (#1037)
• c80252ed perf(enrich/derive/metrics): only create indexed graph once (#1036)
• 1dab573d perf(enrich/derive): uses better datastructure for deriving dependents (#1035)
• 11a608a9 refactor(enrich/derive/circular): moves creation of indexed module graph into deriveCycles (#1034)

🧹 chores

• 6ddfe153 chore(progress): cleans up steps & performance log (#1038)
• b8358fca doc(cache): adds missing type annotation
• 3d20f907 chore(npm): updates external devDependencies

v17.3.5-beta-2

• 2c72a14f perf(enrich/orphan): optimizes the data structure it exercises upon (#1037)

from the previous beta:

• b8358fca doc(cache): adds missing type annotation
• c80252ed perf(enrich/derive/metrics): only create indexed graph once (#1036)
• 1dab573d perf(enrich/derive): uses better datastructure for deriving dependents (#1035)
• 11a608a9 refactor(enrich/derive/circular): moves creation of indexed module graph into deriveCycles (#1034)

v17.3.4

... (truncated)

Commits

• 6372494 17.3.6
• 9ca0ab0 doc: various updates to type annotations
• 64d42f9 chore(npm): updates external devDependencies
• a3a41f1 chore: tweaks dependency-cruiser configuration
• 464388c refactor(cache): uses more appropriate Set for remembering which cache contex...
• f924f5c chore(LICENSE): 2026
• 54becb3 fix(report/teamcity): uses same filename pattern for typedefs as used elsewhe...
• d58c78a refactor: 👞 memoize (#1040)
• 0a82fc3 chore(main): logs the 'report from cache' step as part of the 'report' step
• e884b1e refactor(report/anon): replaces word list memoization with internal map
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for dependency-cruiser since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.