diff --git a/index.js b/index.js
index 5b48939..f8aea4b 100755
--- a/index.js
+++ b/index.js
@@ -34,7 +34,7 @@ async function guessStartTag() {
   // If we are in the 3.x release stream, tiny changes were made to the workflow.yml
   try {
     const devFile = fs.readFileSync(".github/workflows/dev.yml", "utf-8");
-    const workflow = yaml.safeLoad(devFile);
+    const workflow = yaml.load(devFile);
 
     // We started 3.0.0 with `on: [push, pull_request]` but quickly changed
     // to avoid running the workflow on pushing tags
diff --git a/package-lock.json b/package-lock.json
index d641e9d..80cf0a1 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,9 +10,9 @@
       "license": "MIT",
       "dependencies": {
         "boilerplate-update": "npm:@phated/boilerplate-update@^0.37.6",
-        "js-yaml": "^3.14.0",
-        "remote-git-tags": "^3.0.0",
-        "sver": "^1.8.3"
+        "js-yaml": "^4.3.2",
+        "remote-git-tags": "^4.0.0",
+        "sver": "^2.0.1"
       },
       "bin": {
         "update-template": "index.js"
@@ -651,13 +651,10 @@
       }
     },
     "node_modules/argparse": {
-      "version": "1.0.10",
-      "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
-      "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==",
-      "license": "MIT",
-      "dependencies": {
-        "sprintf-js": "~1.0.2"
-      }
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
+      "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
+      "license": "Python-2.0"
     },
     "node_modules/asn1": {
       "version": "0.2.6",
@@ -1277,19 +1274,6 @@
         "url": "https://opencollective.com/eslint"
       }
     },
-    "node_modules/esprima": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz",
-      "integrity": "sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==",
-      "license": "BSD-2-Clause",
-      "bin": {
-        "esparse": "bin/esparse.js",
-        "esvalidate": "bin/esvalidate.js"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
     "node_modules/esquery": {
       "version": "1.7.0",
       "resolved": "https://registry.npmjs.org/esquery/-/esquery-1.7.0.tgz",
@@ -2219,13 +2203,22 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "3.15.2",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.2.tgz",
-      "integrity": "sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==",
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz",
+      "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
       "license": "MIT",
       "dependencies": {
-        "argparse": "^1.0.7",
-        "esprima": "^4.0.0"
+        "argparse": "^2.0.1"
       },
       "bin": {
         "js-yaml": "bin/js-yaml.js"
@@ -7717,12 +7710,15 @@
       }
     },
     "node_modules/remote-git-tags": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/remote-git-tags/-/remote-git-tags-3.0.0.tgz",
-      "integrity": "sha512-C9hAO4eoEsX+OXA4rla66pXZQ+TLQ8T9dttgQj18yuKlPMTVkIkdYXvlMC55IuUsIkV6DpmQYi10JKFLaU+l7w==",
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/remote-git-tags/-/remote-git-tags-4.0.0.tgz",
+      "integrity": "sha512-WfE6JT6ffq3vsh9s2dw4zOQLhIbuaCNKm9+i1+icGA05gGQcETgW5L6vBk8So/RBdb51ozyrMv4HLKdGlyHCgA==",
       "license": "MIT",
       "engines": {
-        "node": ">=8"
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
     "node_modules/request": {
@@ -7939,12 +7935,6 @@
         "node": ">= 6"
       }
     },
-    "node_modules/sprintf-js": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz",
-      "integrity": "sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==",
-      "license": "BSD-3-Clause"
-    },
     "node_modules/sshpk": {
       "version": "1.18.0",
       "resolved": "https://registry.npmjs.org/sshpk/-/sshpk-1.18.0.tgz",
@@ -8039,23 +8029,10 @@
       }
     },
     "node_modules/sver": {
-      "version": "1.8.4",
-      "resolved": "https://registry.npmjs.org/sver/-/sver-1.8.4.tgz",
-      "integrity": "sha512-71o1zfzyawLfIWBOmw8brleKyvnbn73oVHNCsu51uPMz/HWiKkkXsI31JjHW5zqXEqnPYkIiHd8ZmL7FCimLEA==",
-      "license": "MIT",
-      "optionalDependencies": {
-        "semver": "^6.3.0"
-      }
-    },
-    "node_modules/sver/node_modules/semver": {
-      "version": "6.3.1",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
-      "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==",
-      "license": "ISC",
-      "optional": true,
-      "bin": {
-        "semver": "bin/semver.js"
-      }
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/sver/-/sver-2.0.1.tgz",
+      "integrity": "sha512-zqIx4tK5+gR8xE8VgLNr+IA0mqKDgMNdsfX86DTfNNnVKyuVUhjGdz6KA0rO3q445WUfGpEeJym1m3Xym7ot6w==",
+      "license": "MIT"
     },
     "node_modules/tar": {
       "version": "6.2.1",
diff --git a/package.json b/package.json
index 3e1ac86..17dccc4 100644
--- a/package.json
+++ b/package.json
@@ -32,9 +32,9 @@
   },
   "dependencies": {
     "boilerplate-update": "npm:@phated/boilerplate-update@^0.37.6",
-    "js-yaml": "^3.14.0",
-    "remote-git-tags": "^3.0.0",
-    "sver": "^1.8.3"
+    "js-yaml": "^4.3.2",
+    "remote-git-tags": "^4.0.0",
+    "sver": "^2.0.1"
   },
   "devDependencies": {
     "eslint": "10.11.0",