[security] Bump lodash.mergewith from 4.6.1 to 4.6.2

see: https://github.com/lodash/lodash/issues/4348

Signed-off-by: Marc Dumais <marc.dumais@ericsson.com>

CHANGELOG.md

@@ -2,8 +2,8 @@
 
 ## v0.9.0
 - [task] added support for VS Code task contribution points: `taskDefinitions`, `problemMatchers`, and `problemPatterns`
-
 - [plugin] added support of debug activation events [#5645](https://github.com/theia-ide/theia/pull/5645)
+- [security] Bump lodash.mergewith from 4.6.1 to 4.6.2
 
 Breaking changes:
 

yarn.lock

@@ -6059,8 +6059,9 @@ lodash.memoize@^4.1.2:
   resolved "https://registry.yarnpkg.com/lodash.memoize/-/lodash.memoize-4.1.2.tgz#bcc6c49a42a2840ed997f323eada5ecd182e0bfe"
 
 lodash.mergewith@^4.6.0:
-  version "4.6.1"
-  resolved "https://registry.yarnpkg.com/lodash.mergewith/-/lodash.mergewith-4.6.1.tgz#639057e726c3afbdb3e7d42741caa8d6e4335927"
+  version "4.6.2"
+  resolved "https://registry.yarnpkg.com/lodash.mergewith/-/lodash.mergewith-4.6.2.tgz#617121f89ac55f59047c7aec1ccd6654c6590f55"
+  integrity sha512-GK3g5RPZWTRSeLSpgP8Xhra+pnjBC56q9FZYe1d5RN3TJ35dbkGy3YqBSMbyCrlbi+CM9Z3Jk5yTL7RCsqboyQ==
 
 lodash.restparam@^3.0.0:
   version "3.6.1"