diff --git a/package-lock.json b/package-lock.json
index 33e96c569..54e1ac8fb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7209,9 +7209,9 @@
       "dev": true
     },
     "semver": {
-      "version": "6.1.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-6.1.2.tgz",
-      "integrity": "sha512-z4PqiCpomGtWj8633oeAdXm1Kn1W++3T8epkZYnwiVgIYIJ0QHszhInYSJTYxebByQH7KVCEAn8R9duzZW2PhQ=="
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz",
+      "integrity": "sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw=="
     },
     "set-blocking": {
       "version": "2.0.0",
diff --git a/package.json b/package.json
index 911b8ae4c..03df6637d 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,7 @@
     "@actions/http-client": "^1.0.8",
     "@actions/io": "^1.0.2",
     "@actions/tool-cache": "^1.5.4",
-    "semver": "^6.1.1"
+    "semver": "^6.3.0"
   },
   "devDependencies": {
     "@types/jest": "^24.0.13",