diff --git a/package.json b/package.json
index 5eb91cf..79249ee 100644
--- a/package.json
+++ b/package.json
@@ -11,7 +11,7 @@
     "body-parser": "^1.19.0",
     "express": "^4.16.2",
     "just-safe-get": "^1.3.0",
-    "node-fetch": "^2.2.0",
+    "node-fetch": "^2.6.1",
     "probot": "^9.2.15",
     "probot-app-delete-merged-branch": "^1.0.2-0",
     "probot-app-deploy": "^1.1.1-0",
diff --git a/yarn.lock b/yarn.lock
index 4afea4c..3e28b33 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3643,10 +3643,10 @@ nice-try@^1.0.4:
   resolved "https://registry.yarnpkg.com/nice-try/-/nice-try-1.0.5.tgz#a3378a7696ce7d223e88fc9b764bd7ef1089e366"
   integrity sha512-1nh45deeb5olNY7eX82BkPO7SSxR5SSYJiPTrTdFUVYwAl8CKMA5N9PjTYkHiRjisVcxcQ1HXdLhx2qxxJzLNQ==
 
-node-fetch@^2.2.0, node-fetch@^2.3.0:
-  version "2.3.0"
-  resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.3.0.tgz#1a1d940bbfb916a1d3e0219f037e89e71f8c5fa5"
-  integrity sha512-MOd8pV3fxENbryESLgVIeaGKrdl+uaYhCSSVkjeOb/31/njTpcis5aWfdqgNlHIrKOLRbMnfPINPOML2CIFeXA==
+node-fetch@^2.2.0, node-fetch@^2.3.0, node-fetch@^2.6.1:
+  version "2.6.1"
+  resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.1.tgz#045bd323631f76ed2e2b55573394416b639a0052"
+  integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw==
 
 node-int64@^0.4.0:
   version "0.4.0"