diff --git a/package.json b/package.json
index 3592039..1531a9f 100755
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "test": "yarn lint && jest"
   },
   "dependencies": {
-    "defu": "^3.2.2",
+    "defu": "^6.1.3",
     "hasha": "^5.2.0"
   },
   "devDependencies": {
diff --git a/yarn.lock b/yarn.lock
index b5386f4..a11d7a6 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4890,6 +4890,11 @@ defu@^3.2.2:
   resolved "https://registry.yarnpkg.com/defu/-/defu-3.2.2.tgz#be20f4cc49b9805d54ee6b610658d53894942e97"
   integrity sha512-8UWj5lNv7HD+kB0e9w77Z7TdQlbUYDVWqITLHNqFIn6khrNHv5WQo38Dcm1f6HeNyZf0U7UbPf6WeZDSdCzGDQ==
 
+defu@^6.1.3:
+  version "6.1.3"
+  resolved "https://registry.yarnpkg.com/defu/-/defu-6.1.3.tgz#6d7f56bc61668e844f9f593ace66fd67ef1205fd"
+  integrity sha512-Vy2wmG3NTkmHNg/kzpuvHhkqeIx3ODWqasgCRbKtbXEN0G+HpEEv9BtJLp7ZG1CZloFaC41Ah3ZFbq7aqCqMeQ==
+
 delayed-stream@~1.0.0:
   version "1.0.0"
   resolved "https://registry.yarnpkg.com/delayed-stream/-/delayed-stream-1.0.0.tgz#df3ae199acadfb7d440aaae0b29e2272b24ec619"