diff --git a/packages/k8s/package-lock.json b/packages/k8s/package-lock.json
index 079716a8..81163ad8 100644
--- a/packages/k8s/package-lock.json
+++ b/packages/k8s/package-lock.json
@@ -14,7 +14,7 @@
         "@actions/io": "^1.1.2",
         "@kubernetes/client-node": "^0.22.2",
         "hooklib": "file:../hooklib",
-        "js-yaml": "^4.1.0",
+        "js-yaml": "^4.2.0",
         "shlex": "^2.1.2"
       },
       "devDependencies": {
@@ -3395,9 +3395,19 @@
       "dev": true
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
+      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
       "dependencies": {
         "argparse": "^2.0.1"
       },
@@ -7728,9 +7738,9 @@
       "dev": true
     },
     "js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
+      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
       "requires": {
         "argparse": "^2.0.1"
       }
diff --git a/packages/k8s/package.json b/packages/k8s/package.json
index 28fad944..38c0d384 100644
--- a/packages/k8s/package.json
+++ b/packages/k8s/package.json
@@ -18,7 +18,7 @@
     "@actions/io": "^1.1.2",
     "@kubernetes/client-node": "^0.22.2",
     "hooklib": "file:../hooklib",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.2.0",
     "shlex": "^2.1.2"
   },
   "devDependencies": {