diff --git a/change/@graphitation-apollo-forest-run-975a92b4-a1e4-4c35-9b95-41e4c4b5c584.json b/change/@graphitation-apollo-forest-run-975a92b4-a1e4-4c35-9b95-41e4c4b5c584.json
new file mode 100644
index 000000000..ed0e196ad
--- /dev/null
+++ b/change/@graphitation-apollo-forest-run-975a92b4-a1e4-4c35-9b95-41e4c4b5c584.json
@@ -0,0 +1,7 @@
+{
+  "type": "patch",
+  "comment": "update of picomatch and path-to-regexp",
+  "packageName": "@graphitation/apollo-forest-run",
+  "email": "celiac@microsoft.com",
+  "dependentChangeType": "patch"
+}
diff --git a/packages/apollo-forest-run/compat/package-lock.json b/packages/apollo-forest-run/compat/package-lock.json
index 0caa720a2..53965fb1a 100644
--- a/packages/apollo-forest-run/compat/package-lock.json
+++ b/packages/apollo-forest-run/compat/package-lock.json
@@ -30,6 +30,7 @@
         "jest": "27.5.1",
         "jest-fetch-mock": "3.0.3",
         "jest-junit": "13.2.0",
+        "picomatch": "^2.3.2",
         "react-test-renderer": "17.0.2",
         "ts-jest": "27.1.5",
         "wait-for-observables": "1.0.3"
@@ -4277,10 +4278,11 @@
       "dev": true
     },
     "node_modules/picomatch": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
-      "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+      "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">=8.6"
       },
@@ -8650,9 +8652,9 @@
       "dev": true
     },
     "picomatch": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
-      "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.2.tgz",
+      "integrity": "sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==",
       "dev": true
     },
     "pirates": {
diff --git a/packages/apollo-forest-run/compat/package.json b/packages/apollo-forest-run/compat/package.json
index 09c89845a..dc84485ac 100644
--- a/packages/apollo-forest-run/compat/package.json
+++ b/packages/apollo-forest-run/compat/package.json
@@ -104,8 +104,8 @@
   "devDependencies": {
     "@testing-library/react": "12.1.5",
     "@testing-library/react-hooks": "8.0.0",
-    "@types/jest": "27.5.1",
     "@types/fetch-mock": "7.3.5",
+    "@types/jest": "27.5.1",
     "crypto-hash": "1.3.0",
     "fetch-mock": "9.11.0",
     "jest": "27.5.1",
@@ -165,4 +165,4 @@
   "overrides": {
     "cross-spawn": "^7.0.5"
   }
-}
\ No newline at end of file
+}
diff --git a/website/yarn.lock b/website/yarn.lock
index 2ec6cd302..d831c85d0 100644
--- a/website/yarn.lock
+++ b/website/yarn.lock
@@ -7690,9 +7690,9 @@ path-to-regexp@^1.7.0:
     isarray "0.0.1"
 
 path-to-regexp@~0.1.12:
-  version "0.1.12"
-  resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.12.tgz#d5e1a12e478a976d432ef3c58d534b9923164bb7"
-  integrity sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==
+  version "0.1.13"
+  resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.13.tgz#9b22ec16bc3ab88d05a0c7e369869421401ab17d"
+  integrity sha512-A/AGNMFN3c8bOlV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==
 
 path-type@^4.0.0:
   version "4.0.0"
@@ -7710,9 +7710,9 @@ picocolors@^1.0.0, picocolors@^1.1.1:
   integrity sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==
 
 picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1:
-  version "2.3.1"
-  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.1.tgz#3ba3833733646d9d3e4995946c1365a67fb07a42"
-  integrity sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==
+  version "2.3.2"
+  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.2.tgz#5a942915e26b372dc0f0e6753149a16e6b1c5601"
+  integrity sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==
 
 pkg-dir@^7.0.0:
   version "7.0.0"
diff --git a/yarn.lock b/yarn.lock
index 5c2642a06..bdf87491a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10135,15 +10135,10 @@ picocolors@^1.1.1:
   resolved "https://registry.yarnpkg.com/picocolors/-/picocolors-1.1.1.tgz#3d321af3eab939b083c8f929a1d12cda81c26b6b"
   integrity sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==
 
-picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3:
-  version "2.3.0"
-  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.0.tgz#f1f061de8f6a4bf022892e2d128234fb98302972"
-  integrity sha512-lY1Q/PiJGC2zOv/z391WOTD+Z02bCgsFfvxoXXf6h7kv9o+WmsmzYqrAwY63sNgOxE4xEdq0WyUnXfKeBrSvYw==
-
-picomatch@^2.3.1:
-  version "2.3.1"
-  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.1.tgz#3ba3833733646d9d3e4995946c1365a67fb07a42"
-  integrity sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==
+picomatch@^2.0.4, picomatch@^2.2.1, picomatch@^2.2.3, picomatch@^2.3.1:
+  version "2.3.2"
+  resolved "https://registry.yarnpkg.com/picomatch/-/picomatch-2.3.2.tgz#5a942915e26b372dc0f0e6753149a16e6b1c5601"
+  integrity sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==
 
 pirates@^4.0.1, pirates@^4.0.4:
   version "4.0.5"