diff --git a/package-lock.json b/package-lock.json
index 156c812d94..83050a1849 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5831,7 +5831,9 @@
 			}
 		},
 		"node_modules/yaml": {
-			"version": "2.8.4",
+			"version": "2.9.0",
+			"resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
+			"integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
 			"license": "ISC",
 			"bin": {
 				"yaml": "bin.mjs"
@@ -6009,7 +6011,7 @@
 				"typebox": "^1.1.24",
 				"undici": "^7.19.1",
 				"uuid": "^14.0.0",
-				"yaml": "^2.8.2",
+				"yaml": "^2.9.0",
 				"zeromq": "^6.1.2"
 			},
 			"bin": {
diff --git a/packages/coding-agent/package.json b/packages/coding-agent/package.json
index 4bcc57a11a..92eb22077e 100644
--- a/packages/coding-agent/package.json
+++ b/packages/coding-agent/package.json
@@ -63,7 +63,7 @@
 		"typebox": "^1.1.24",
 		"undici": "^7.19.1",
 		"uuid": "^14.0.0",
-		"yaml": "^2.8.2",
+		"yaml": "^2.9.0",
 		"zeromq": "^6.1.2"
 	},
 	"overrides": {