update dependencies due to a security issue in lodash

package.json

@@ -12,8 +12,8 @@
     "cssnano": "^4.1.8",
     "postcss": "^7.0.6",
     "uglifyjs-webpack-plugin": "^2.1.1",
-    "webpack": "^4.29.0",
-    "webpack-cli": "^3.2.1"
+    "webpack": "^4.29.3",
+    "webpack-cli": "^3.2.3"
   },
   "repository": {
     "type": "git",
@@ -78,8 +78,8 @@
   "license": "Apache-2.0",
   "dependencies": {
     "firebase": "^5.8.1",
-    "react": "^16.6.3",
-    "react-dom": "^16.6.3",
+    "react": "^16.8.1",
+    "react-dom": "^16.8.1",
     "react-intl": "^2.8.0",
     "tinode-sdk": "^0.15.12"
   }