diff --git a/danger/package.json b/danger/package.json
index a078291a78..d6753ae5ca 100644
--- a/danger/package.json
+++ b/danger/package.json
@@ -9,7 +9,7 @@
   "devDependencies": {
     "danger": "13.0.10",
     "fast-glob": "3.3.3",
-    "js-yaml": "4.1.1",
+    "js-yaml": "4.3.0",
     "semver": "7.7.4",
     "zod": "4.3.6"
   }
diff --git a/danger/pnpm-lock.yaml b/danger/pnpm-lock.yaml
index 6c029f5eee..77ed1a91a8 100644
--- a/danger/pnpm-lock.yaml
+++ b/danger/pnpm-lock.yaml
@@ -19,8 +19,8 @@ importers:
         specifier: 3.3.3
         version: 3.3.3
       js-yaml:
-        specifier: 4.1.1
-        version: 4.1.1
+        specifier: 4.3.0
+        version: 4.3.0
       semver:
         specifier: 7.7.4
         version: 7.7.4
@@ -260,8 +260,8 @@ packages:
     resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==, tarball: https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz}
     engines: {node: '>=0.12.0'}
 
-  js-yaml@4.1.1:
-    resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==, tarball: https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz}
+  js-yaml@4.3.0:
+    resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==, tarball: https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz}
     hasBin: true
 
   json5@2.2.3:
@@ -722,7 +722,7 @@ snapshots:
 
   is-number@7.0.0: {}
 
-  js-yaml@4.1.1:
+  js-yaml@4.3.0:
     dependencies:
       argparse: 2.0.1