Update merge-deep per SNYK-JS-MERGEDEEP-1070277

[deetergp]

Details

Update merge-deep to 3.0.3 to avoid a nasty vulnerability detailed in the snyk issue linked in this PR's GH issue. This is an update of a dependency, which is why the changes only appear in package-lock.json and not also in package.json.

Fixed Issues

Fixes https://github.com/Expensify/Expensify/issues/165494

Tests

Since merge-deep is an electron dependency, general regression testing of the desktop app should cover any issues that might arise from this change. I fired up the desktop app and the web app and carried on a conversation between two test users, look for anything that appeared out of the ordinary and did not encounter any.

QA Steps

General regression testing of the desktop app should be sufficient.

Tested On

• Web
• Mobile Web
• Desktop
• iOS
• Android

[botify]

npm has a package.json file and a package-lock.json file. It seems you updated one without the other, which is usually a sign of a mistake. If you are updating a package make sure that you update the version in package.json then run npm install

[OSBotify]

🚀 Deployed to staging in version: 1.0.65-9🚀

platform	result
🤖 android 🤖	success ✅
🖥 desktop 🖥	success ✅
🍎 iOS 🍎	success ✅
🕸 web 🕸	success ✅

[OSBotify]

🚀 Deployed to production in version: 1.0.68-4🚀

platform	result
🤖 android 🤖	success ✅
🖥 desktop 🖥	success ✅
🍎 iOS 🍎	success ✅
🕸 web 🕸	success ✅