diff --git a/json-graphql-server/package-lock.json b/json-graphql-server/package-lock.json
index dedc1f5..46825f4 100644
--- a/json-graphql-server/package-lock.json
+++ b/json-graphql-server/package-lock.json
@@ -8803,7 +8803,7 @@
                 },
                 "onetime": {
                     "version": "1.1.0",
-                    "resolved": "http://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz",
+                    "resolved": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz",
                     "integrity": "sha1-ofeDj4MUxRbwXs78vEzP4EtO14k=",
                     "dev": true
                 },
@@ -8882,9 +8882,9 @@
             "dev": true
         },
         "lodash.merge": {
-            "version": "4.6.1",
-            "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.1.tgz",
-            "integrity": "sha512-AOYza4+Hf5z1/0Hztxpm2/xiPZgi/cjMqdnKTUWTBSKchJlxXXuUSxCCl8rJlf4g6yww/j6mA8nC8Hw/EZWxKQ=="
+            "version": "4.6.2",
+            "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz",
+            "integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ=="
         },
         "lodash.sortby": {
             "version": "4.7.0",
@@ -8928,7 +8928,7 @@
                 },
                 "onetime": {
                     "version": "1.1.0",
-                    "resolved": "http://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz",
+                    "resolved": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz",
                     "integrity": "sha1-ofeDj4MUxRbwXs78vEzP4EtO14k=",
                     "dev": true
                 },
@@ -9611,7 +9611,7 @@
                 },
                 "onetime": {
                     "version": "1.1.0",
-                    "resolved": "http://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz",
+                    "resolved": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz",
                     "integrity": "sha1-ofeDj4MUxRbwXs78vEzP4EtO14k=",
                     "dev": true
                 },
diff --git a/json-graphql-server/package.json b/json-graphql-server/package.json
index 8c3f991..a5807eb 100644
--- a/json-graphql-server/package.json
+++ b/json-graphql-server/package.json
@@ -64,7 +64,7 @@
         "graphql-tools": "~1.1.0",
         "graphql-type-json": "~0.1.4",
         "inflection": "~1.12.0",
-        "lodash.merge": "^4.6.1",
+        "lodash.merge": "^4.6.2",
         "reify": "^0.12.3",
         "xhr-mock": "^2.4.1"
     },
diff --git a/json-graphql-server/yarn.lock b/json-graphql-server/yarn.lock
index 773b2b3..c3e353c 100644
--- a/json-graphql-server/yarn.lock
+++ b/json-graphql-server/yarn.lock
@@ -5004,7 +5004,7 @@ lodash.cond@^4.3.0:
   resolved "https://registry.yarnpkg.com/lodash.cond/-/lodash.cond-4.5.2.tgz#f471a1da486be60f6ab955d17115523dd1d255d5"
   integrity sha1-9HGh2khr5g9quVXRcRVSPdHSVdU=
 
-lodash.merge@^4.6.1:
+lodash.merge@^4.6.2:
   version "4.6.2"
   resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a"
   integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==