diff --git a/package.json b/package.json
index 9386135..5a1e556 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
   "dependencies": {
     "@actions/core": "^3.0.1",
     "@docker/actions-toolkit": "^0.95.0",
-    "js-yaml": "^5.3.0"
+    "js-yaml": "^5.4.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.3",
diff --git a/yarn.lock b/yarn.lock
index 71d8bad..3b8dfaf 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2840,7 +2840,7 @@ __metadata:
     eslint-plugin-prettier: "npm:^5.5.5"
     generate-license-file: "npm:^4.1.1"
     globals: "npm:^17.3.0"
-    js-yaml: "npm:^5.3.0"
+    js-yaml: "npm:^5.4.0"
     prettier: "npm:^3.8.1"
     typescript: "npm:^5.9.3"
     vitest: "npm:^4.0.18"
@@ -4008,6 +4008,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"js-yaml@npm:^5.4.0":
+  version: 5.4.0
+  resolution: "js-yaml@npm:5.4.0"
+  dependencies:
+    argparse: "npm:^2.0.1"
+  bin:
+    js-yaml: bin/js-yaml.mjs
+  checksum: 10/d8216083212772b203a1ee16be2ea96a1638c6d7f0ff769ba4da274b5ad29e858bd26d96761feb8937fce1aa47e8acfa79b2cd21a8ced724cc5555c11b4d056c
+  languageName: node
+  linkType: hard
+
 "jsbn@npm:1.1.0":
   version: 1.1.0
   resolution: "jsbn@npm:1.1.0"