diff --git a/detect/detect.go b/detect/detect.go
index 8ea1ab5..ca8962a 100644
--- a/detect/detect.go
+++ b/detect/detect.go
@@ -26,7 +26,7 @@ import (
 	"github.com/git-pkgs/licensecheck"
 	"github.com/git-pkgs/manifests"
 	"github.com/git-pkgs/spdx"
-	"gopkg.in/yaml.v3"
+	"go.yaml.in/yaml/v3"
 )
 
 const (
diff --git a/go.mod b/go.mod
index b221bca..629b55d 100644
--- a/go.mod
+++ b/go.mod
@@ -19,8 +19,8 @@ require (
 	github.com/git-pkgs/spdx v0.3.1
 	github.com/klauspost/compress v1.19.2
 	github.com/ulikunitz/xz v0.5.16
+	go.yaml.in/yaml/v3 v3.0.5
 	golang.org/x/term v0.45.0
-	gopkg.in/yaml.v3 v3.0.1
 )
 
 require (
@@ -41,6 +41,6 @@ require (
 	github.com/odvcencio/gotreesitter v0.51.0 // indirect
 	github.com/package-url/packageurl-go v0.1.7 // indirect
 	github.com/pandatix/go-cvss v0.6.4 // indirect
-	go.yaml.in/yaml/v3 v3.0.5 // indirect
 	golang.org/x/sys v0.47.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )