Merge #3782

3782: [Snyk] Fix for 1 vulnerable dependencies r=jniles a=snyk-bot

#### Description
This PR fixes one or more vulnerable packages in the `yarn` dependencies of this project.
See the [Snyk test report](https://app.snyk.io/org/ima-world-health/test/github/12290d5c-3515-46c5-8e4a-a4837cb81fe4/master..snyk-fix-bb7f0abdf7c03c8da6890ec93aea8732) for more details.

#### Snyk Project: [IMA-WorldHealth/bhima:package.json](https://app.snyk.io/org/ima-world-health/project/12290d5c-3515-46c5-8e4a-a4837cb81fe4)
#### Snyk Organization: [IMA World Health](https://app.snyk.io/org/ima-world-health)

#### Lockfile
If you are using `package-lock.json` or `yarn.lock`, please re-lock your dependencies and push an updated lockfile before merging this PR.

#### Changes included in this PR


- A Snyk policy (`.snyk`) file, with updated settings.


#### Vulnerabilities that will be fixed

##### With a [Snyk patch](https://snyk.io/docs/fixing-vulnerabilities/#patches):
- [SNYK-JS-LODASH-450202](https://snyk.io/vuln/SNYK-JS-LODASH-450202)



You can read more about Snyk's upgrade and patch logic in [Snyk's documentation](https://snyk.io/docs/using-snyk/).

Check the changes in this PR to ensure they won't cause issues with your project.

Stay secure,
The Snyk team

_**Note**: You are seeing this because you or someone else with access to this repository has authorised Snyk to open Fix PRs. To review the settings for this Snyk project please go to the [project settings page](https://app.snyk.io/org/ima-world-health/project/12290d5c-3515-46c5-8e4a-a4837cb81fe4/settings)._

[//]: # (snyk:metadata:{"type":"auto","packageManager":"yarn","vulns":["SNYK-JS-LODASH-450202"],"patch":["SNYK-JS-LODASH-450202"],"upgrade":[],"isBreakingChange":false,"env":"prod","dependencies":[],"prType":"fix"})


Co-authored-by: snyk-test <snyk-test@snyk.io>

.snyk

@@ -1,5 +1,5 @@
 # Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
-version: v1.10.2
+version: v1.13.5
 # ignores vulnerabilities until expiry date; change duration by modifying expiry date
 ignore:
   'npm:deep-extend:20180409':
@@ -79,3 +79,36 @@ patch:
         patched: '2017-09-27T03:37:07.471Z'
     - helmet > connect > finalhandler > debug:
         patched: '2017-09-27T03:37:07.471Z'
+  SNYK-JS-LODASH-450202:
+    - snyk > snyk-config > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - csvtojson > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > inquirer > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - mailgun-js > async > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > snyk-nuget-plugin > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > snyk-nodejs-lockfile-parser > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > snyk-mvn-plugin > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - winston > async > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > @snyk/dep-graph > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - juice > web-resource-inliner > async > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > snyk-nodejs-lockfile-parser > graphlib > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > snyk-go-plugin > graphlib > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > @snyk/dep-graph > graphlib > lodash:
+        patched: '2019-07-04T02:07:31.720Z'
+    - snyk > snyk-php-plugin > @snyk/composer-lockfile-parser > lodash:
+        patched: '2019-07-04T02:07:31.720Z'

package.json

@@ -16,7 +16,8 @@
     "build:clean": "./sh/build-init-database.sh",
     "watch": "./node_modules/.bin/gulp watch",
     "snyk-protect": "snyk protect",
-    "prepare": "npm run snyk-protect"
+    "prepare": "npm run snyk-protect",
+    "prepublish": "npm run snyk-protect"
   },
   "repository": {
     "type": "git",
@@ -92,7 +93,7 @@
     "ng-file-upload": "^12.2.13",
     "ngstorage": "^0.3.11",
     "q": "~1.5.1",
-    "snyk": "^1.161.0",
+    "snyk": "^1.189.0",
     "stream-to-promise": "^2.2.0",
     "tempy": "^0.3.0",
     "typeface-open-sans": "^0.0.54",