companion - bump lodash.merge to 4.6.2 to fix audit warning

packages/@uppy/companion/package.json

@@ -47,7 +47,7 @@
     "helmet": "3.8.2",
     "isobject": "3.0.1",
     "jsonwebtoken": "8.3.0",
-    "lodash.merge": "4.6.1",
+    "lodash.merge": "4.6.2",
     "mime-types": "2.1.24",
     "morgan": "1.9.1",
     "ms": "2.1.1",