diff --git a/package-lock.json b/package-lock.json
index 182616d..b2c12b4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
         "@actions/glob": "^0.6.1",
         "@actions/io": "^3.0.0",
         "@actions/tool-cache": "^4.0.0",
-        "js-yaml": "^4.2.0",
+        "js-yaml": "^4.3.1",
         "undici": "^6.27.0"
       },
       "devDependencies": {
@@ -4152,9 +4152,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.2.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
-      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "funding": [
         {
           "type": "github",
diff --git a/package.json b/package.json
index 3a24367..63a19b9 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "@actions/glob": "^0.6.1",
     "@actions/io": "^3.0.0",
     "@actions/tool-cache": "^4.0.0",
-    "js-yaml": "^4.2.0",
+    "js-yaml": "^4.3.1",
     "undici": "^6.27.0"
   },
   "devDependencies": {