diff --git a/vscode/prompty/package-lock.json b/vscode/prompty/package-lock.json
index 68bd15312..e562547e9 100644
--- a/vscode/prompty/package-lock.json
+++ b/vscode/prompty/package-lock.json
@@ -19,7 +19,7 @@
         "@vscode/vsce": "^3.9.2",
         "esbuild": "^0.28.2",
         "eslint": "^10.10.0",
-        "js-yaml": "^5.4.1",
+        "js-yaml": "^5.4.2",
         "mocha": "^12.0.0",
         "typescript": "^5.9.3",
         "typescript-eslint": "^8.69.0"
@@ -3599,9 +3599,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "5.4.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.1.tgz",
-      "integrity": "sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==",
+      "version": "5.4.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz",
+      "integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==",
       "dev": true,
       "funding": [
         {
@@ -8006,9 +8006,9 @@
       "dev": true
     },
     "js-yaml": {
-      "version": "5.4.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.1.tgz",
-      "integrity": "sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==",
+      "version": "5.4.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz",
+      "integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==",
       "dev": true,
       "requires": {
         "argparse": "^2.0.1"
diff --git a/vscode/prompty/package.json b/vscode/prompty/package.json
index 89e937662..0a53539d8 100644
--- a/vscode/prompty/package.json
+++ b/vscode/prompty/package.json
@@ -369,7 +369,7 @@
     "@vscode/vsce": "^3.9.2",
     "esbuild": "^0.28.2",
     "eslint": "^10.10.0",
-    "js-yaml": "^5.4.1",
+    "js-yaml": "^5.4.2",
     "mocha": "^12.0.0",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.69.0"
diff --git a/vscode/prompty/packages/core/package-lock.json b/vscode/prompty/packages/core/package-lock.json
index c8055bb56..66a56e999 100644
--- a/vscode/prompty/packages/core/package-lock.json
+++ b/vscode/prompty/packages/core/package-lock.json
@@ -1229,9 +1229,9 @@
 			}
 		},
 		"node_modules/gray-matter/node_modules/js-yaml": {
-			"version": "3.15.1",
-			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz",
-			"integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==",
+			"version": "3.15.2",
+			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.2.tgz",
+			"integrity": "sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==",
 			"license": "MIT",
 			"dependencies": {
 				"argparse": "^1.0.7",
@@ -1420,9 +1420,9 @@
 			"license": "MIT"
 		},
 		"node_modules/js-yaml": {
-			"version": "5.4.1",
-			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.1.tgz",
-			"integrity": "sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==",
+			"version": "5.4.2",
+			"resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz",
+			"integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==",
 			"funding": [
 				{
 					"type": "github",
diff --git a/web/package-lock.json b/web/package-lock.json
index e8557c421..93ba179d4 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -3913,9 +3913,9 @@
       }
     },
     "node_modules/devalue": {
-      "version": "5.9.0",
-      "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.0.tgz",
-      "integrity": "sha512-RWrqdArjvPbsATEhOPUo6Wndc/iWnkWKlhIrdlF3zMMYo/c3CVtoaVAyLtWxz5h8nSlkHzxnzV2uLydPXmtF+A==",
+      "version": "5.9.4",
+      "resolved": "https://registry.npmjs.org/devalue/-/devalue-5.9.4.tgz",
+      "integrity": "sha512-sPAT4pztbu6586/hrhOnMKS17IJrvg12mXiSPSS3W5qDeN2RGgvZ0diZCm31dBbnevfVmujNO3IM2wrS4Y2Rhg==",
       "license": "MIT"
     },
     "node_modules/devlop": {