diff --git a/package.json b/package.json
index fc421c43c..fad92be48 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "node-red",
-  "version": "0.18.4",
+  "version": "0.18.5",
   "description": "A visual tool for wiring the Internet of Things",
   "homepage": "http://nodered.org",
   "license": "Apache-2.0",
@@ -42,20 +42,20 @@
     "cookie-parser": "1.4.3",
     "cors": "2.8.4",
     "cron": "1.3.0",
-    "express": "4.16.2",
+    "express": "4.16.3",
     "express-session": "1.15.6",
-    "follow-redirects": "1.3.0",
+    "follow-redirects": "1.4.1",
     "fs-extra": "5.0.0",
     "fs.notify": "0.0.4",
     "hash-sum": "1.0.2",
     "i18next": "1.10.6",
     "is-utf8": "0.2.1",
-    "js-yaml": "3.10.0",
+    "js-yaml": "3.11.0",
     "json-stringify-safe": "5.0.1",
-    "jsonata": "1.5.0",
+    "jsonata": "1.5.3",
     "media-typer": "0.3.0",
     "memorystore": "1.6.0",
-    "mqtt": "2.15.1",
+    "mqtt": "2.17.0",
     "multer": "1.3.0",
     "mustache": "2.3.0",
     "node-red-node-email": "0.1.*",
@@ -68,10 +68,10 @@
     "passport": "0.4.0",
     "passport-http-bearer": "1.0.1",
     "passport-oauth2-client-password": "0.1.2",
-    "raw-body": "2.3.2",
-    "semver": "5.4.1",
+    "raw-body": "2.3.3",
+    "semver": "5.5.0",
     "sentiment": "2.1.0",
-    "uglify-js": "3.3.6",
+    "uglify-js": "3.3.24",
     "when": "3.7.8",
     "ws": "1.1.5",
     "xml2js": "0.4.19"