diff --git a/package.json b/package.json
index 6f9f0e32..c888951b 100644
--- a/package.json
+++ b/package.json
@@ -78,7 +78,7 @@
     "dedent": "^1.5.3",
     "glob": "^13.0.0",
     "jest": "^30.4.1",
-    "js-yaml": "^4.2.0",
+    "js-yaml": "^5.0.0",
     "jsr": "^0.14.0",
     "mri": "^1",
     "npm-run-all2": "^9.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 68c845ba..9c634aa5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -51,8 +51,8 @@ importers:
         specifier: ^30.4.1
         version: 30.4.2(@types/node@24.13.2)
       js-yaml:
-        specifier: ^4.2.0
-        version: 4.2.0
+        specifier: '>=4.2.0'
+        version: 5.0.0
       jsr:
         specifier: ^0.14.0
         version: 0.14.3
@@ -1730,10 +1730,6 @@ packages:
   js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
-  js-yaml@4.2.0:
-    resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
-    hasBin: true
-
   js-yaml@5.0.0:
     resolution: {integrity: sha512-GSvaPUbk1U+FMZ7rJzF+F8e5YVtu7KnD40et/5rBXXRBv2jCO9L3qCewvIDDdudC0QycTFlf6EAA+h3kxBsuUw==}
     hasBin: true
@@ -4572,10 +4568,6 @@ snapshots:
 
   js-tokens@4.0.0: {}
 
-  js-yaml@4.2.0:
-    dependencies:
-      argparse: 2.0.1
-
   js-yaml@5.0.0:
     dependencies:
       argparse: 2.0.1