diff --git a/.travis.yml b/.travis.yml
index ebf0cee..ee8025c 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,6 +1,6 @@
 language: node_js
 node_js:
-  - "14.19.2"
+  - "14.19.3"
 
 before_script:
   - npm install -g grunt-cli
diff --git a/RELEASENOTES.md b/RELEASENOTES.md
index fb4fa96..c14cbfc 100644
--- a/RELEASENOTES.md
+++ b/RELEASENOTES.md
@@ -1,6 +1,10 @@
 # blue-button-xml Release Notes
 
-## v1.8.3 - April 15, 2022
+## v1.8.5 - May 31, 2022
+
+- Patch update: GHSA-rm36-94g8-835r - Race Condition in Grunt
+
+## v1.8.4 - April 15, 2022
 
 - Patch update: upgraded dev dependencies
 - Converted tests and coverages to jest
diff --git a/package-lock.json b/package-lock.json
index 0c2734a..1024ba4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11,7 +11,7 @@
       "dependencies": {
         "libxmljs": "^0.19.10",
         "lodash": "^4.17.21",
-        "moment": "^2.29.3"
+        "moment": "^2.29.4"
       },
       "devDependencies": {
         "grunt": "^1.5.3",
@@ -23,7 +23,7 @@
         "jest": "^27.5.1"
       },
       "engines": {
-        "node": ">= 14.19.2"
+        "node": ">= 14.19.3"
       }
     },
     "node_modules/@ampproject/remapping": {
@@ -4721,9 +4721,9 @@
       }
     },
     "node_modules/moment": {
-      "version": "2.29.3",
-      "resolved": "https://registry.npmjs.org/moment/-/moment-2.29.3.tgz",
-      "integrity": "sha512-c6YRvhEo//6T2Jz/vVtYzqBzwvPT95JBQ+smCytzf7c50oMZRsR/a4w88aD34I+/QVSfnoAnSBFPJHItlOMJVw==",
+      "version": "2.29.4",
+      "resolved": "https://registry.npmjs.org/moment/-/moment-2.29.4.tgz",
+      "integrity": "sha512-5LC9SOxjSc2HF6vO2CyuTDNivEdoz2IvyJJGj6X8DJ0eFyfszE0QiEd+iXmBvUP3WHxSjFH/vIsA0EN00cgr8w==",
       "engines": {
         "node": "*"
       }
@@ -10332,9 +10332,9 @@
       "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw=="
     },
     "moment": {
-      "version": "2.29.3",
-      "resolved": "https://registry.npmjs.org/moment/-/moment-2.29.3.tgz",
-      "integrity": "sha512-c6YRvhEo//6T2Jz/vVtYzqBzwvPT95JBQ+smCytzf7c50oMZRsR/a4w88aD34I+/QVSfnoAnSBFPJHItlOMJVw=="
+      "version": "2.29.4",
+      "resolved": "https://registry.npmjs.org/moment/-/moment-2.29.4.tgz",
+      "integrity": "sha512-5LC9SOxjSc2HF6vO2CyuTDNivEdoz2IvyJJGj6X8DJ0eFyfszE0QiEd+iXmBvUP3WHxSjFH/vIsA0EN00cgr8w=="
     },
     "morgan": {
       "version": "1.10.0",
diff --git a/package.json b/package.json
index 183a270..4ca1beb 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amida-tech/blue-button-xml",
-  "version": "1.8.4",
+  "version": "1.8.5",
   "description": "Blue Button XML Parsing Infrastructure",
   "main": "./index.js",
   "browser": {
@@ -38,12 +38,12 @@
   ],
   "license": "Apache-2.0",
   "engines": {
-    "node": ">= 14.19.2"
+    "node": ">= 14.19.3"
   },
   "dependencies": {
     "libxmljs": "^0.19.10",
     "lodash": "^4.17.21",
-    "moment": "^2.29.3"
+    "moment": "^2.29.4"
   },
   "devDependencies": {
     "grunt": "^1.5.3",