diff --git a/package-lock.json b/package-lock.json
index 518257d..a7ac253 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
                 "@actions/core": "^2.0.3",
                 "@actions/github": "^8.0.1",
                 "deepmerge-ts": "^7.1.5",
-                "js-yaml": "^4.1.1"
+                "js-yaml": "^4.2.0"
             },
             "devDependencies": {
                 "@babel/core": "^7.28.5",
@@ -4964,9 +4964,19 @@
             "license": "MIT"
         },
         "node_modules/js-yaml": {
-            "version": "4.1.1",
-            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
-            "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+            "version": "4.2.0",
+            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
+            "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+            "funding": [
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/puzrin"
+                },
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/nodeca"
+                }
+            ],
             "license": "MIT",
             "dependencies": {
                 "argparse": "^2.0.1"
diff --git a/package.json b/package.json
index b691f37..fe2d2ee 100644
--- a/package.json
+++ b/package.json
@@ -36,7 +36,7 @@
         "@actions/core": "^2.0.3",
         "@actions/github": "^8.0.1",
         "deepmerge-ts": "^7.1.5",
-        "js-yaml": "^4.1.1"
+        "js-yaml": "^4.2.0"
     },
     "devDependencies": {
         "@babel/core": "^7.28.5",