diff --git a/package.json b/package.json
index e9575a76a..b9c6965e3 100644
--- a/package.json
+++ b/package.json
@@ -40,7 +40,7 @@
     "@types/node": "^24.0.0",
     "eslint-plugin-wdio": "^9.26.0",
     "globals": "^16.5.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.2.0",
     "minimatch": "^10.0.0",
     "nx": "^22.0.0",
     "oxfmt": "^0.41.0",
diff --git a/packages/app/package.json b/packages/app/package.json
index 0c78a1186..d4796b63b 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -111,7 +111,7 @@
     "@types/react": "~19.2.0",
     "@types/semver": "^7.3.6",
     "@typescript/native-preview": "^7.0.0-0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.2.0",
     "memfs": "^4.0.0",
     "minimatch": "^10.0.0",
     "oxfmt": "^0.41.0",
diff --git a/yarn.lock b/yarn.lock
index c14f7a769..970350da8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2498,7 +2498,7 @@ __metadata:
     "@types/node": "npm:^24.0.0"
     eslint-plugin-wdio: "npm:^9.26.0"
     globals: "npm:^16.5.0"
-    js-yaml: "npm:^4.1.0"
+    js-yaml: "npm:^4.2.0"
     minimatch: "npm:^10.0.0"
     nx: "npm:^22.0.0"
     oxfmt: "npm:^0.41.0"
@@ -10161,6 +10161,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"js-yaml@npm:^4.2.0":
+  version: 4.2.0
+  resolution: "js-yaml@npm:4.2.0"
+  dependencies:
+    argparse: "npm:^2.0.1"
+  bin:
+    js-yaml: bin/js-yaml.js
+  checksum: 10c0/1916456c118746603b067d74bbcbb0445d9a1d5e474ad4ae775e7b20525bed902e01d9d97dd0c81fcd8d4f596162309d0eb057f4aa38f3e9647f14075e9dea45
+  languageName: node
+  linkType: hard
+
 "js2xmlparser2@npm:^0.x":
   version: 0.2.0
   resolution: "js2xmlparser2@npm:0.2.0"
@@ -12979,7 +12990,7 @@ __metadata:
     ajv: "npm:^8.0.0"
     fast-xml-builder: "npm:^1.2.0"
     fast-xml-parser: "npm:^5.8.0"
-    js-yaml: "npm:^4.1.0"
+    js-yaml: "npm:^4.2.0"
     memfs: "npm:^4.0.0"
     minimatch: "npm:^10.0.0"
     oxfmt: "npm:^0.41.0"