diff --git a/package-lock.json b/package-lock.json
index 458c300490..cf258d9b87 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2080,9 +2080,9 @@
       "dev": true
     },
     "deepmerge": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.1.0.tgz",
-      "integrity": "sha512-tJlmKE535XRVBrzMRMqlm4V2S/l3yO/qr9Ad0MUqgR5jh9epGrALs8Q6+pROMa6ntDieAlnmYM/cDFCtNjp4+Q=="
+      "version": "4.2.2",
+      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.2.2.tgz",
+      "integrity": "sha512-FJ3UgI4gIl+PHZm53knsuSFpE+nESMr7M4v9QcgB7S63Kj/6WqMiFQJpBBYz1Pt+66bZpP3Q7Lye0Oo9MPKEdg=="
     },
     "defer-to-connect": {
       "version": "1.1.3",
diff --git a/package.json b/package.json
index 3e0e1df5d5..4952950690 100644
--- a/package.json
+++ b/package.json
@@ -19,7 +19,7 @@
   "author": "Brandon Keepers",
   "license": "ISC",
   "dependencies": {
-    "deepmerge": "^4.1.0",
+    "deepmerge": "^4.2.2",
     "js-yaml": "^3.13.1",
     "probot": "9.11.3"
   },