diff --git a/package-lock.json b/package-lock.json
index f63fc3aa1c..ddaa6216dd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -26533,7 +26533,7 @@
         "minimatch": "^9.0.0",
         "read-pkg": "^9.0.0",
         "semver": "^7.3.8",
-        "yaml": "^2.1.3",
+        "yaml": "^2.8.0",
         "yargs": "^17.6.0"
       },
       "bin": {
@@ -26546,7 +26546,6 @@
         "@vitest/ui": "^0.34.0",
         "execa": "^8.0.0",
         "memfs": "^4.0.0",
-        "node-fetch": "^3.3.1",
         "typescript": "^5.0.0",
         "unionfs": "^4.4.0",
         "vite": "^6.0.0",
diff --git a/packages/build-info/package.json b/packages/build-info/package.json
index 6543c2e061..4dd2c0b1bd 100644
--- a/packages/build-info/package.json
+++ b/packages/build-info/package.json
@@ -52,7 +52,7 @@
     "minimatch": "^9.0.0",
     "read-pkg": "^9.0.0",
     "semver": "^7.3.8",
-    "yaml": "^2.1.3",
+    "yaml": "^2.8.0",
     "yargs": "^17.6.0"
   },
   "devDependencies": {
@@ -62,7 +62,6 @@
     "@vitest/ui": "^0.34.0",
     "execa": "^8.0.0",
     "memfs": "^4.0.0",
-    "node-fetch": "^3.3.1",
     "typescript": "^5.0.0",
     "unionfs": "^4.4.0",
     "vite": "^6.0.0",
diff --git a/packages/build-info/src/browser/file-system.test.ts b/packages/build-info/src/browser/file-system.test.ts
index ce0e8e74a1..0e58458420 100644
--- a/packages/build-info/src/browser/file-system.test.ts
+++ b/packages/build-info/src/browser/file-system.test.ts
@@ -1,6 +1,4 @@
-import { Response } from 'node-fetch'
 import { beforeEach, describe, expect, test, vi } from 'vitest'
-// Once we only support node18 we can remove node-fetch
 
 import { NoopLogger } from '../node/get-build-info.js'
 import { detectPackageManager } from '../package-managers/detect-package-manager.js'
diff --git a/packages/build-info/src/file-system.test.ts b/packages/build-info/src/file-system.test.ts
index cee7246d02..513ca7de92 100644
--- a/packages/build-info/src/file-system.test.ts
+++ b/packages/build-info/src/file-system.test.ts
@@ -1,8 +1,6 @@
 import { join, relative, posix } from 'path'
 
-import { Response } from 'node-fetch'
 import { beforeEach, describe, expect, test, vi } from 'vitest'
-// Once we only support node18 we can remove node-fetch
 
 import { GithubProvider, WebFS } from './browser/file-system.js'
 import { detectPackageManager } from './package-managers/detect-package-manager.js'