diff --git a/package.json b/package.json
index a73442c52..2c7748621 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "@types/dockerode": "3.3.18",
     "@types/nanographql": "2.0.1",
     "@types/node": "18.16.16",
-    "@types/node-fetch": "2.6.4",
+    "@types/node-fetch": "2.6.6",
     "@types/pg": "8.10.1",
     "@types/wait-on": "5.3.1",
     "@typescript-eslint/eslint-plugin": "5.59.7",
@@ -36,7 +36,7 @@
     "graphql": "16.6.0",
     "husky": "8.0.3",
     "json-decycle": "3.0.0",
-    "node-fetch": "2.6.11",
+    "node-fetch": "2.7.0",
     "p-retry": "4.6.2",
     "pg": "8.11.0",
     "postgraphile": "4.13.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 98aa47f7b..935b42aba 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1,5 +1,9 @@
 lockfileVersion: '6.0'
 
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
 dependencies:
   graphile-build:
     specifier: '4'
@@ -25,8 +29,8 @@ devDependencies:
     specifier: 18.16.16
     version: 18.16.16
   '@types/node-fetch':
-    specifier: 2.6.4
-    version: 2.6.4
+    specifier: 2.6.6
+    version: 2.6.6
   '@types/pg':
     specifier: 8.10.1
     version: 8.10.1
@@ -67,8 +71,8 @@ devDependencies:
     specifier: 3.0.0
     version: 3.0.0
   node-fetch:
-    specifier: 2.6.11
-    version: 2.6.11
+    specifier: 2.7.0
+    version: 2.7.0
   p-retry:
     specifier: 4.6.2
     version: 4.6.2
@@ -502,7 +506,7 @@ packages:
       '@octokit/request-error': 2.1.0
       '@octokit/types': 6.34.0
       is-plain-object: 5.0.0
-      node-fetch: 2.6.11
+      node-fetch: 2.7.0
       universal-user-agent: 6.0.0
     transitivePeerDependencies:
       - encoding
@@ -713,11 +717,11 @@ packages:
     resolution: {integrity: sha512-1WqTOVub3K/Hmym7bJnZP1jz5BT8JkINUv3sU+1A5IQY7OJZN8r+yfeczSbMD0MJlvDOLpcS81ykp94sHGdJhg==}
     dev: true
 
-  /@types/node-fetch@2.6.4:
-    resolution: {integrity: sha512-1ZX9fcN4Rvkvgv4E6PAY5WXUFWFcRWxZa3EW83UjycOB9ljJCedb2CupIP4RZMEwF/M3eTcCihbBRgwtGbg5Rg==}
+  /@types/node-fetch@2.6.6:
+    resolution: {integrity: sha512-95X8guJYhfqiuVVhRFxVQcf4hW/2bCuoPwDasMf/531STFoNoWTT7YDnWdXHEZKqAGUigmpG31r2FE70LwnzJw==}
     dependencies:
       '@types/node': 18.16.16
-      form-data: 3.0.1
+      form-data: 4.0.0
     dev: true
 
   /@types/node@18.16.16:
@@ -1267,6 +1271,7 @@ packages:
   /buildcheck@0.0.3:
     resolution: {integrity: sha512-pziaA+p/wdVImfcbsZLNF32EiWyujlQLwolMqUQE8xpKNOH7KmZQaY8sXN7DGOEzPAElo9QTaeNRfGnf3iOJbA==}
     engines: {node: '>=10.0.0'}
+    requiresBuild: true
     dev: true
     optional: true
 
@@ -2414,8 +2419,8 @@ packages:
       signal-exit: 3.0.7
     dev: true
 
-  /form-data@3.0.1:
-    resolution: {integrity: sha512-RHkBKtLWUVwd7SqRIvCZMEvAMoGUp0XU+seQiZejj0COz3RI3hWP4sCv3gZWWLjJTd7rGwcsF5eKZGii0r/hbg==}
+  /form-data@4.0.0:
+    resolution: {integrity: sha512-ETEklSGi5t0QMZuiXoA/Q6vcnxcLQP5vdugSpuAyi6SVGi2clPPp+xgEhuMaHC+zGgn31Kd235W35f7Hykkaww==}
     engines: {node: '>= 6'}
     dependencies:
       asynckit: 0.4.0
@@ -3665,6 +3670,7 @@ packages:
 
   /nan@2.16.0:
     resolution: {integrity: sha512-UdAqHyFngu7TfQKsCBgAA6pWDkT8MAO7d0jyOecVhN5354xbLqdn8mV9Tat9gepAupm0bt2DbeaSC8vS52MuFA==}
+    requiresBuild: true
     dev: true
     optional: true
 
@@ -3690,8 +3696,8 @@ packages:
       lodash: 4.17.21
     dev: true
 
-  /node-fetch@2.6.11:
-    resolution: {integrity: sha512-4I6pdBY1EthSqDmJkiNk3JIT8cswwR9nfeW/cPdUagJYEQG7R95WRH74wpz7ma8Gh/9dI9FP+OU+0E4FvtA55w==}
+  /node-fetch@2.7.0:
+    resolution: {integrity: sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==}
     engines: {node: 4.x || >=6.0.0}
     peerDependencies:
       encoding: ^0.1.0