diff --git a/apps/web/package.json b/apps/web/package.json
index 8489b77..1c9dee1 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -17,7 +17,7 @@
     "postgres": "^3.4.5",
     "react": "^19.3.1",
     "react-dom": "^19.3.1",
-    "yaml": "^2.7.0",
+    "yaml": "^2.9.1",
     "zod": "^4.6.6"
   },
   "devDependencies": {
diff --git a/packages/ingest/package.json b/packages/ingest/package.json
index 45d3c36..bc0fb6f 100644
--- a/packages/ingest/package.json
+++ b/packages/ingest/package.json
@@ -23,7 +23,7 @@
     "dotenv": "^17.4.2",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.5",
-    "yaml": "^2.7.0",
+    "yaml": "^2.9.1",
     "zod": "^4.6.6"
   },
   "devDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d3aec90..e74ad6d 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -44,8 +44,8 @@ importers:
         specifier: ^19.3.1
         version: 19.3.1(react@19.3.1)
       yaml:
-        specifier: ^2.7.0
-        version: 2.9.0
+        specifier: ^2.9.1
+        version: 2.9.1
       zod:
         specifier: ^4.6.6
         version: 4.6.6
@@ -103,8 +103,8 @@ importers:
         specifier: ^3.4.5
         version: 3.4.9
       yaml:
-        specifier: ^2.7.0
-        version: 2.9.0
+        specifier: ^2.9.1
+        version: 2.9.1
       zod:
         specifier: ^4.6.6
         version: 4.6.6
@@ -914,8 +914,8 @@ packages:
     engines: {node: ^16.13.0 || >=18.0.0}
     hasBin: true
 
-  yaml@2.9.0:
-    resolution: {integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==}
+  yaml@2.9.1:
+    resolution: {integrity: sha512-3NxN8+78OdzbT7C/WjGsyfPAtJaN3FNDsWxv7Y7mcDsT/oOmgW8BpyQQFFBnvZE3j9Y2Sdz1ULFLezL7Eb2yFw==}
     engines: {node: '>= 14.6'}
     hasBin: true
 
@@ -1471,6 +1471,6 @@ snapshots:
       isexe: 3.1.5
     optional: true
 
-  yaml@2.9.0: {}
+  yaml@2.9.1: {}
 
   zod@4.6.6: {}