diff --git a/package.json b/package.json
index 8854f0de7..124e7cbfe 100644
--- a/package.json
+++ b/package.json
@@ -38,7 +38,7 @@
     "@actions/github": "^6.0.0",
     "@octokit/rest": "^21.0.0",
     "@stdlib/utils-convert-path": "^0.2.1",
-    "lodash": "^4.17.21",
+    "lodash": "^4.18.1",
     "micromatch": "^4.0.5",
     "yaml": "^2.3.1"
   },
diff --git a/yarn.lock b/yarn.lock
index a4d32e479..bb3ea640c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3537,10 +3537,10 @@ lodash.upperfirst@4.3.1:
   resolved "https://registry.yarnpkg.com/lodash.upperfirst/-/lodash.upperfirst-4.3.1.tgz#1365edf431480481ef0d1c68957a5ed99d49f7ce"
   integrity sha512-sReKOYJIJf74dhJONhU4e0/shzi1trVbSWDOhKYE5XV2O+H7Sb2Dihwuc7xWxVl+DgFPyTqIN3zMfT9cq5iWDg==
 
-lodash@^4.17.21:
-  version "4.17.21"
-  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.21.tgz#679591c564c3bffaae8454cf0b3df370c3d6911c"
-  integrity sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==
+lodash@^4.18.1:
+  version "4.18.1"
+  resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.18.1.tgz#ff2b66c1f6326d59513de2407bf881439812771c"
+  integrity sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==
 
 lru-cache@^5.1.1:
   version "5.1.1"