[Security] Bump lodash.merge from 4.6.1 to 4.6.2 in /js

Bumps [lodash.merge](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. **This update includes security fixes.**
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits

)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>