diff --git a/package.json b/package.json
index 65c83e5..a613073 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,7 @@
     "@docker/actions-toolkit": "^0.91.0",
     "http-proxy-agent": "^9.0.0",
     "https-proxy-agent": "^9.0.0",
-    "js-yaml": "^4.1.1"
+    "js-yaml": "^4.2.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.3",
diff --git a/yarn.lock b/yarn.lock
index a911e20..8573242 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3276,7 +3276,7 @@ __metadata:
     globals: "npm:^17.3.0"
     http-proxy-agent: "npm:^9.0.0"
     https-proxy-agent: "npm:^9.0.0"
-    js-yaml: "npm:^4.1.1"
+    js-yaml: "npm:^4.2.0"
     prettier: "npm:^3.8.1"
     typescript: "npm:^5.9.3"
     vitest: "npm:^4.0.18"
@@ -4459,6 +4459,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"js-yaml@npm:^4.2.0":
+  version: 4.2.0
+  resolution: "js-yaml@npm:4.2.0"
+  dependencies:
+    argparse: "npm:^2.0.1"
+  bin:
+    js-yaml: bin/js-yaml.js
+  checksum: 10/51de2067a2b44b07ba5206132e56005f8b568ff279bb4d2f645068958c56fa4827d40a6841c983234671fa0a134bf094d0b0717873c2a3d319185297af145a6d
+  languageName: node
+  linkType: hard
+
 "jsbn@npm:1.1.0":
   version: 1.1.0
   resolution: "jsbn@npm:1.1.0"