diff --git a/package-lock.json b/package-lock.json
index 1dabfe3..947e4de 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,7 +19,7 @@
         "@earendil-works/pi-coding-agent": "^0.80.7",
         "@types/node": "^24.3.0",
         "typescript": "^5.9.2",
-        "yaml": "^2.8.3"
+        "yaml": "^2.9.0"
       },
       "engines": {
         "node": ">=22.0.0"
@@ -2189,9 +2189,9 @@
       }
     },
     "node_modules/yaml": {
-      "version": "2.8.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
-      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
+      "version": "2.9.0",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
+      "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
       "dev": true,
       "license": "ISC",
       "bin": {
diff --git a/package.json b/package.json
index a6f14ac..d1aaa4e 100644
--- a/package.json
+++ b/package.json
@@ -52,7 +52,7 @@
     "@types/node": "^24.3.0",
     "@earendil-works/pi-coding-agent": "^0.80.7",
     "typescript": "^5.9.2",
-    "yaml": "^2.8.3"
+    "yaml": "^2.9.0"
   },
   "pi": {
     "extensions": [