diff --git a/package-lock.json b/package-lock.json
index a919103..e53d867 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
         "fast-xml-parser": "^5.10.1",
         "fs-extra": "^11.4.0",
         "glob": "^13.0.6",
-        "js-yaml": "^5.2.1",
+        "js-yaml": "^5.2.2",
         "jsonpath-plus": "^10.4.0",
         "opencode-ai": "^1.17.18",
         "sqlite-vec": "^0.1.9",
@@ -2415,9 +2415,9 @@
       "license": "ISC"
     },
     "node_modules/js-yaml": {
-      "version": "5.2.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.1.tgz",
-      "integrity": "sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==",
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.2.tgz",
+      "integrity": "sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==",
       "funding": [
         {
           "type": "github",
diff --git a/package.json b/package.json
index fab8207..749ec73 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
     "fast-xml-parser": "^5.10.1",
     "fs-extra": "^11.4.0",
     "glob": "^13.0.6",
-    "js-yaml": "^5.2.1",
+    "js-yaml": "^5.2.2",
     "jsonpath-plus": "^10.4.0",
     "opencode-ai": "^1.17.18",
     "sqlite-vec": "^0.1.9",