diff --git a/package-lock.json b/package-lock.json
index ea4bca0..25cf34c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "chart": "github:jstrace/chart",
         "dotenv": "^16.4.5",
         "js-base64": "^3.7.7",
-        "lodash": "^4.17.21",
+        "lodash": "^4.18.0",
         "luxon": "^3.4.4",
         "node-fetch": "^3.3.2",
         "timsort": "^0.3.0"
@@ -365,9 +365,10 @@
       "integrity": "sha512-7rCnleh0z2CkXhH67J8K1Ytz0b2Y+yxTPL+/KOJoa20hfnVQ/3/T6W/KflYI4bRHRagNeXeU2bkNGI3v1oS/lw=="
     },
     "node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+      "version": "4.18.0",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.0.tgz",
+      "integrity": "sha512-l1mfj2atMqndAHI3ls7XqPxEjV2J9ZkcNyHpoZA3r2T1LLwDB69jgkMWh71YKwhBbK0G2f4WSn05ahmQXVxupA==",
+      "deprecated": "Bad release. Please use lodash@4.17.21 instead."
     },
     "node_modules/luxon": {
       "version": "3.4.4",
@@ -725,9 +726,9 @@
       "integrity": "sha512-7rCnleh0z2CkXhH67J8K1Ytz0b2Y+yxTPL+/KOJoa20hfnVQ/3/T6W/KflYI4bRHRagNeXeU2bkNGI3v1oS/lw=="
     },
     "lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+      "version": "4.18.0",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.0.tgz",
+      "integrity": "sha512-l1mfj2atMqndAHI3ls7XqPxEjV2J9ZkcNyHpoZA3r2T1LLwDB69jgkMWh71YKwhBbK0G2f4WSn05ahmQXVxupA=="
     },
     "luxon": {
       "version": "3.4.4",
diff --git a/package.json b/package.json
index 0836ae1..ab476ff 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
     "chart": "github:jstrace/chart",
     "dotenv": "^16.4.5",
     "js-base64": "^3.7.7",
-    "lodash": "^4.17.21",
+    "lodash": "^4.18.0",
     "luxon": "^3.4.4",
     "node-fetch": "^3.3.2",
     "timsort": "^0.3.0"