diff --git a/packages/tools/package.json b/packages/tools/package.json
index eb80634..a423513 100644
--- a/packages/tools/package.json
+++ b/packages/tools/package.json
@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "jju": "^1.4.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.1.1",
     "tinyglobby": "^0.2.13"
   },
   "devDependencies": {
diff --git a/yarn.lock b/yarn.lock
index 9b64ea4..8666195 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2414,10 +2414,10 @@ js-yaml@^3.13.1, js-yaml@^3.6.1:
     argparse "^1.0.7"
     esprima "^4.0.0"
 
-js-yaml@^4.1.0:
-  version "4.1.0"
-  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.0.tgz#c1fb65f8f5017901cdd2c951864ba18458a10602"
-  integrity sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==
+js-yaml@^4.1.0, js-yaml@^4.1.1:
+  version "4.1.1"
+  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.1.tgz#854c292467705b699476e1a2decc0c8a3458806b"
+  integrity sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==
   dependencies:
     argparse "^2.0.1"