chore: cherry-pick upstream #159 and #164

- #159: Bump lodash 4.17.21 → 4.17.23 (Prototype Pollution fix, SNYK-JS-LODASH-15053838)
- #164: Read versionString from plugin.json manifest instead of hardcoding

Cherry-picked from mattermost/mattermost-plugin-boards

Author: root

webapp/package.json

@@ -46,7 +46,7 @@
 		"emoji-mart": "^3.0.1",
 		"fullcalendar": "^5.10.2",
 		"immutable": "3.7.6",
-		"lodash": "^4.17.21",
+		"lodash": "^4.17.23",
 		"marked": "^4.0.12",
 		"mattermost-redux": "10.8.0",
 		"moment": "^2.29.1",

webapp/src/constants.ts

@@ -2,6 +2,8 @@
 // See LICENSE.txt for license information.
 
 
+import {version} from './manifest'
+
 import {TelemetryActions} from './telemetry/telemetryClient'
 
 enum Permission {
@@ -38,7 +40,7 @@ class Constants {
     static readonly titleColumnId = '__title'
     static readonly badgesColumnId = '__badges'
 
-    static readonly versionString = '9.2.2'
+    static readonly versionString = version
 
     static readonly archiveHelpPage = 'https://docs.mattermost.com/boards/migrate-to-boards.html'
     static readonly imports = [