Change effective on 01 October 2018
We have updated the Cedar-14, Heroku-16, and Heroku-18 stack images to address security notices in multiple packages. This update also includes several new packages for Heroku-18 to improve upgradability from Heroku-16. The new stack images will be rolled out automatically in the next 24 hours. You do not need to redeploy your app or restart your dynos.
See this Dev Center article for an overview of the libraries available on the Cedar-14, Heroku-16, and Heroku-18 stack images.