fix: memory leak (#7291)

closes #7189

- downgrade lodash to 3.x
- downgrade bookshelf to 0.9.x
- downgrade knex to 0.10.x
- keep lodash 4.x functions

core/server/overrides.js

@@ -1,4 +1,11 @@
-var moment = require('moment-timezone');
+var moment = require('moment-timezone'),
+    _ = require('lodash'),
+    toPairs = require('lodash.topairs'),
+    fromPairs = require('lodash.frompairs'),
+    toString = require('lodash.tostring'),
+    pickBy = require('lodash.pickby'),
+    uniqBy = require('lodash.uniqby'),
+    omitBy = require('lodash.omitby');
 
 /**
  * force UTC
@@ -8,3 +15,13 @@ var moment = require('moment-timezone');
  *   - be careful when you work with date operations, therefor always wrap a date into moment
  */
 moment.tz.setDefault('UTC');
+
+/**
+ * lodash 4.x functions we use
+ */
+_.toPairs = toPairs;
+_.fromPairs = fromPairs;
+_.toString = toString;
+_.omitBy = omitBy;
+_.uniqBy = uniqBy;
+_.pickBy = pickBy;

package.json

@@ -31,7 +31,7 @@
     "bcryptjs": "2.3.0",
     "bluebird": "3.4.1",
     "body-parser": "1.15.2",
-    "bookshelf": "0.10.0",
+    "bookshelf": "0.9.4",
     "chalk": "1.1.3",
     "cheerio": "0.20.0",
     "compression": "1.6.2",
@@ -52,8 +52,14 @@
     "intl": "1.2.4",
     "intl-messageformat": "1.3.0",
     "jsonpath": "0.2.6",
-    "knex": "0.11.10",
-    "lodash": "4.15.0",
+    "knex": "0.10.0",
+    "lodash": "3.10.1",
+    "lodash.frompairs": "4.0.1",
+    "lodash.omitby": "4.6.0",
+    "lodash.pickby": "4.6.0",
+    "lodash.topairs": "4.3.0",
+    "lodash.tostring": "4.1.4",
+    "lodash.uniqby": "4.7.0",
     "moment": "2.14.1",
     "moment-timezone": "0.5.5",
     "morgan": "1.7.0",