diff --git a/package-lock.json b/package-lock.json
index 9427b0809fd..a69ac9a3c8d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -98,6 +98,7 @@
 			"version": "7.28.4",
 			"dev": true,
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"@babel/code-frame": "^7.27.1",
 				"@babel/generator": "^7.28.3",
@@ -821,6 +822,7 @@
 			"integrity": "sha512-itvL5h8RETACmOTFc4UfIyB2RfEHi71Ax6E/PivVxq9NseKbOWpeyHEOIbmAw1rs8Ak0VursQNww7lf7YtUwzg==",
 			"dev": true,
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"env-paths": "^2.2.1",
 				"import-fresh": "^3.3.0",
@@ -1472,7 +1474,9 @@
 			}
 		},
 		"node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": {
-			"version": "3.14.1",
+			"version": "3.14.2",
+			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
+			"integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
 			"dev": true,
 			"license": "MIT",
 			"dependencies": {
@@ -4197,7 +4201,8 @@
 		"node_modules/@types/json-schema": {
 			"version": "7.0.15",
 			"dev": true,
-			"license": "MIT"
+			"license": "MIT",
+			"peer": true
 		},
 		"node_modules/@types/linkify-it": {
 			"version": "5.0.0",
@@ -4206,6 +4211,7 @@
 		"node_modules/@types/markdown-it": {
 			"version": "14.1.2",
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"@types/linkify-it": "^5",
 				"@types/mdurl": "^2"
@@ -4226,6 +4232,7 @@
 			"integrity": "sha512-QoiaXANRkSXK6p0Duvt56W208du4P9Uye9hWLWgGMDTEoKPhuenzNcC4vGUmrNkiOKTlIrBoyNQYNpSwfEZXSg==",
 			"dev": true,
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"undici-types": "~7.16.0"
 			}
@@ -4390,6 +4397,7 @@
 		"node_modules/acorn": {
 			"version": "8.15.0",
 			"license": "MIT",
+			"peer": true,
 			"bin": {
 				"acorn": "bin/acorn"
 			},
@@ -4478,6 +4486,7 @@
 		"node_modules/ajv": {
 			"version": "6.12.6",
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"fast-deep-equal": "^3.1.1",
 				"fast-json-stable-stringify": "^2.0.0",
@@ -5174,6 +5183,7 @@
 				}
 			],
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"baseline-browser-mapping": "^2.8.9",
 				"caniuse-lite": "^1.0.30001746",
@@ -6451,7 +6461,9 @@
 			}
 		},
 		"node_modules/depcheck/node_modules/js-yaml": {
-			"version": "3.14.1",
+			"version": "3.14.2",
+			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
+			"integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
 			"dev": true,
 			"license": "MIT",
 			"dependencies": {
@@ -6977,6 +6989,7 @@
 			"version": "9.37.0",
 			"dev": true,
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"@eslint-community/eslint-utils": "^4.8.0",
 				"@eslint-community/regexpp": "^4.12.1",
@@ -9742,7 +9755,9 @@
 			"license": "MIT"
 		},
 		"node_modules/js-yaml": {
-			"version": "4.1.0",
+			"version": "4.1.1",
+			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
+			"integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
 			"license": "MIT",
 			"dependencies": {
 				"argparse": "^2.0.1"
@@ -10788,6 +10803,7 @@
 		"node_modules/markdown-it": {
 			"version": "14.1.0",
 			"license": "MIT",
+			"peer": true,
 			"dependencies": {
 				"argparse": "^2.0.1",
 				"entities": "^4.4.0",
@@ -14366,7 +14382,9 @@
 			}
 		},
 		"node_modules/supertap/node_modules/js-yaml": {
-			"version": "3.14.1",
+			"version": "3.14.2",
+			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
+			"integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
 			"dev": true,
 			"license": "MIT",
 			"dependencies": {
@@ -14605,6 +14623,7 @@
 		"node_modules/tinyglobby/node_modules/picomatch": {
 			"version": "4.0.3",
 			"license": "MIT",
+			"peer": true,
 			"engines": {
 				"node": ">=12"
 			},
@@ -15673,7 +15692,7 @@
 				"chalk": "^5.6.2",
 				"data-with-position": "^0.5.0",
 				"import-local": "^3.2.0",
-				"js-yaml": "^4.1.0",
+				"js-yaml": "^4.1.1",
 				"open": "^10.2.0",
 				"pretty-hrtime": "^1.0.3",
 				"semver": "^7.7.2",
@@ -16230,7 +16249,7 @@
 				"escape-string-regexp": "^5.0.0",
 				"globby": "^14.1.0",
 				"graceful-fs": "^4.2.11",
-				"js-yaml": "^4.1.0",
+				"js-yaml": "^4.1.1",
 				"lockfile": "^1.0.4",
 				"make-fetch-happen": "^14.0.3",
 				"node-stream-zip": "^1.15.0",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 9f15c768937..57336b6dbc1 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -112,7 +112,7 @@
 		"chalk": "^5.6.2",
 		"data-with-position": "^0.5.0",
 		"import-local": "^3.2.0",
-		"js-yaml": "^4.1.0",
+		"js-yaml": "^4.1.1",
 		"open": "^10.2.0",
 		"pretty-hrtime": "^1.0.3",
 		"semver": "^7.7.2",
diff --git a/packages/project/package.json b/packages/project/package.json
index 9d4137ec3f9..f3a19cb3bee 100644
--- a/packages/project/package.json
+++ b/packages/project/package.json
@@ -118,7 +118,7 @@
 		"escape-string-regexp": "^5.0.0",
 		"globby": "^14.1.0",
 		"graceful-fs": "^4.2.11",
-		"js-yaml": "^4.1.0",
+		"js-yaml": "^4.1.1",
 		"lockfile": "^1.0.4",
 		"make-fetch-happen": "^14.0.3",
 		"node-stream-zip": "^1.15.0",