diff --git a/package.json b/package.json
index 1f94c87..ee09d38 100644
--- a/package.json
+++ b/package.json
@@ -18,7 +18,7 @@
     "ali-oss": "^6.1.0",
     "debug": "^2.6.1",
     "globby": "^6.1.0",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "ora": "^1.1.0",
     "p-all": "^2.0.0",
     "rc": "^1.1.7"
diff --git a/yarn.lock b/yarn.lock
index a4e1aa3..3cab6dd 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -525,9 +525,9 @@ levn@~0.3.0:
     prelude-ls "~1.1.2"
     type-check "~0.3.2"
 
-lodash@^4.17.23:
-  version "4.17.23"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.23.tgz#f113b0378386103be4f6893388c73d0bde7f2c5a"
+lodash@^4.18.1:
+  version "4.18.1"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c"
 
 log-symbols@^2.1.0:
   version "2.2.0"