diff --git a/package-lock.json b/package-lock.json
index f58fccf..878688a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
         "@opencode-ai/sdk": "^1.17.18",
         "@opencode-plugins/env-protection": "^1.0.4",
         "glob": "^13.0.6",
-        "js-yaml": "^5.2.1",
+        "js-yaml": "^5.2.2",
         "jsonpath-plus": "^10.4.0",
         "opencode-ai": "^1.17.18",
         "typescript": "^6.0.3",
@@ -1536,9 +1536,9 @@
       "license": "ISC"
     },
     "node_modules/js-yaml": {
-      "version": "5.2.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.1.tgz",
-      "integrity": "sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==",
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.2.tgz",
+      "integrity": "sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==",
       "funding": [
         {
           "type": "github",
diff --git a/package.json b/package.json
index 950156e..c7df76a 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,7 @@
     "@opencode-ai/sdk": "^1.17.18",
     "@opencode-plugins/env-protection": "^1.0.4",
     "glob": "^13.0.6",
-    "js-yaml": "^5.2.1",
+    "js-yaml": "^5.2.2",
     "jsonpath-plus": "^10.4.0",
     "opencode-ai": "^1.17.18",
     "typescript": "^6.0.3",