diff --git a/History.md b/History.md
index b691c45b81..cd9874bc13 100644
--- a/History.md
+++ b/History.md
@@ -11,6 +11,8 @@
 
 * The `fibers` npm package has been updated to 1.0.14.
 
+* The `lru-cache` npm package has been updated to 4.0.1.
+
 * Blaze-related packages have been extracted to
   [`meteor/blaze`](https://github.com/meteor/blaze), and the main
   [`meteor/meteor`](https://github.com/meteor/meteor) repository now
diff --git a/scripts/dev-bundle-tool-package.js b/scripts/dev-bundle-tool-package.js
index 028fb203bb..1e22ec482e 100644
--- a/scripts/dev-bundle-tool-package.js
+++ b/scripts/dev-bundle-tool-package.js
@@ -51,7 +51,7 @@ var packageJson = {
     // https://github.com/williamwicks/node-eachline/pull/4
     eachline: "https://github.com/meteor/node-eachline/tarball/ff89722ff94e6b6a08652bf5f44c8fffea8a21da",
     pathwatcher: "6.7.1",
-    'lru-cache': '2.6.4',
+    'lru-cache': '4.0.1',
     'cordova-lib': "6.0.0",
     longjohn: '0.2.11'
   }