diff --git a/package-lock.json b/package-lock.json
index 2e7587b..075635e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
         "fast-xml-parser": "^5.10.1",
         "fs-extra": "^11.4.0",
         "glob": "^13.0.6",
-        "js-yaml": "^5.2.3",
+        "js-yaml": "^5.4.1",
         "jsonpath-plus": "^10.4.0",
         "opencode-ai": "^1.18.15",
         "sqlite-vec": "^0.1.9",
@@ -3234,7 +3234,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "5.2.3",
+      "version": "5.4.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.1.tgz",
+      "integrity": "sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==",
       "funding": [
         {
           "type": "github",
diff --git a/package.json b/package.json
index 055451d..8d35690 100644
--- a/package.json
+++ b/package.json
@@ -24,7 +24,7 @@
     "fast-xml-parser": "^5.10.1",
     "fs-extra": "^11.4.0",
     "glob": "^13.0.6",
-    "js-yaml": "^5.2.3",
+    "js-yaml": "^5.4.1",
     "jsonpath-plus": "^10.4.0",
     "opencode-ai": "^1.18.15",
     "sqlite-vec": "^0.1.9",