diff --git a/package-lock.json b/package-lock.json
index b8ecac4fe..f1d392772 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,7 +13,7 @@
         "@actions/core": "^1.2.6",
         "@actions/exec": "^1.0.1",
         "@actions/github": "^4.0.0",
-        "@actions/http-client": "^1.0.8",
+        "@actions/http-client": "^1.0.11",
         "@actions/io": "^1.1.0",
         "@actions/tool-cache": "^1.7.1",
         "@chrisgavin/safe-which": "^1.0.2",
@@ -69,13 +69,6 @@
         "tmp-promise": "^2.0.2"
       }
     },
-    "node_modules/@actions/artifact/node_modules/@actions/http-client": {
-      "version": "1.0.11",
-      "license": "MIT",
-      "dependencies": {
-        "tunnel": "0.0.6"
-      }
-    },
     "node_modules/@actions/core": {
       "version": "1.2.6",
       "license": "MIT"
@@ -95,8 +88,9 @@
       }
     },
     "node_modules/@actions/http-client": {
-      "version": "1.0.8",
-      "license": "MIT",
+      "version": "1.0.11",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-1.0.11.tgz",
+      "integrity": "sha512-VRYHGQV1rqnROJqdMvGUbY/Kn8vriQe/F9HR2AlYHzmKuM/p3kjNuXhmdBfcVgsvRWTz5C5XW5xvndZrVBuAYg==",
       "dependencies": {
         "tunnel": "0.0.6"
       }
@@ -5055,13 +5049,6 @@
       "dev": true,
       "license": "Apache-2.0"
     },
-    "node_modules/tunnel": {
-      "version": "0.0.6",
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.6.11 <=0.7.0 || >=0.7.3"
-      }
-    },
     "node_modules/type-check": {
       "version": "0.4.0",
       "dev": true,
@@ -5422,14 +5409,6 @@
         "@types/tmp": "^0.1.0",
         "tmp": "^0.1.0",
         "tmp-promise": "^2.0.2"
-      },
-      "dependencies": {
-        "@actions/http-client": {
-          "version": "1.0.11",
-          "requires": {
-            "tunnel": "0.0.6"
-          }
-        }
       }
     },
     "@actions/core": {
@@ -5448,7 +5427,9 @@
       }
     },
     "@actions/http-client": {
-      "version": "1.0.8",
+      "version": "1.0.11",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-1.0.11.tgz",
+      "integrity": "sha512-VRYHGQV1rqnROJqdMvGUbY/Kn8vriQe/F9HR2AlYHzmKuM/p3kjNuXhmdBfcVgsvRWTz5C5XW5xvndZrVBuAYg==",
       "requires": {
         "tunnel": "0.0.6"
       },
@@ -8675,9 +8656,6 @@
       "version": "1.11.1",
       "dev": true
     },
-    "tunnel": {
-      "version": "0.0.6"
-    },
     "type-check": {
       "version": "0.4.0",
       "dev": true,
diff --git a/package.json b/package.json
index 0837b3a45..cb2e98742 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "@actions/core": "^1.2.6",
     "@actions/exec": "^1.0.1",
     "@actions/github": "^4.0.0",
-    "@actions/http-client": "^1.0.8",
+    "@actions/http-client": "^1.0.11",
     "@actions/io": "^1.1.0",
     "@actions/tool-cache": "^1.7.1",
     "@chrisgavin/safe-which": "^1.0.2",