THRIFT-4757: fix npm identified security vulnerability in transient dependency on sync-exec
diff --git a/lib/js/package.json b/lib/js/package.json
index b5c0238..8b16d95 100644
--- a/lib/js/package.json
+++ b/lib/js/package.json
@@ -12,14 +12,14 @@
   "license": "Apache-2.0",
   "devDependencies": {
     "browserify": "^16.2.3",
-    "grunt": "^1.0.2",
-    "grunt-cli": "^1.2.0",
+    "grunt": "^1.0.3",
+    "grunt-cli": "^1.3.2",
     "grunt-contrib-concat": "^1.0.1",
     "grunt-contrib-jshint": "^1.0.0",
-    "grunt-contrib-qunit": "^3.0.1",
+    "grunt-contrib-qunit": "^3.1.0",
     "grunt-contrib-uglify": "^1.0.1",
     "grunt-jsdoc": "^2.2.1",
-    "grunt-shell-spawn": "^0.3.10",
+    "grunt-shell-spawn": "^0.3.12",
     "jslint": "^0.12.0",
     "node-int64": "^0.4.0"
   },