diff --git a/package-lock.json b/package-lock.json
index 3ae814ae..9203880d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -57,7 +57,7 @@
         "serve": "^14.2.4",
         "tus-js-client": "^4.3.1",
         "y-protocols": "^1.0.6",
-        "yaml": "^2.8.1",
+        "yaml": "^2.9.0",
         "yjs": "^13.6.30",
         "zod": "^4.3.6"
       },
@@ -20832,9 +20832,9 @@
       }
     },
     "node_modules/yaml": {
-      "version": "2.8.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
-      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
+      "version": "2.9.0",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
+      "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
       "license": "ISC",
       "bin": {
         "yaml": "bin.mjs"
diff --git a/package.json b/package.json
index d1861f00..bc8e5248 100644
--- a/package.json
+++ b/package.json
@@ -88,7 +88,7 @@
     "serve": "^14.2.4",
     "tus-js-client": "^4.3.1",
     "y-protocols": "^1.0.6",
-    "yaml": "^2.8.1",
+    "yaml": "^2.9.0",
     "yjs": "^13.6.30",
     "zod": "^4.3.6"
   },