diff --git a/_extensions/quarto-openapi/package-lock.json b/_extensions/quarto-openapi/package-lock.json
index 5acb7b6..6cbc5fd 100644
--- a/_extensions/quarto-openapi/package-lock.json
+++ b/_extensions/quarto-openapi/package-lock.json
@@ -7,7 +7,7 @@
       "name": "quarto-openapi-extension",
       "dependencies": {
         "markdown-it": "^15.0.1",
-        "yaml": "^2.9.0"
+        "yaml": "^2.9.1"
       }
     },
     "node_modules/argparse": {
@@ -106,9 +106,9 @@
       "license": "MIT"
     },
     "node_modules/yaml": {
-      "version": "2.9.0",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
-      "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
+      "version": "2.9.1",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.1.tgz",
+      "integrity": "sha512-3NxN8+78OdzbT7C/WjGsyfPAtJaN3FNDsWxv7Y7mcDsT/oOmgW8BpyQQFFBnvZE3j9Y2Sdz1ULFLezL7Eb2yFw==",
       "license": "ISC",
       "bin": {
         "yaml": "bin.mjs"
diff --git a/_extensions/quarto-openapi/package.json b/_extensions/quarto-openapi/package.json
index c51d335..9cbc814 100644
--- a/_extensions/quarto-openapi/package.json
+++ b/_extensions/quarto-openapi/package.json
@@ -5,6 +5,6 @@
   "description": "Dependencies for the quarto-openapi pre-render script. node resolves bare specifiers from node_modules upward from the script's directory, so they must be installed here, not at the repo root.",
   "dependencies": {
     "markdown-it": "^15.0.1",
-    "yaml": "^2.9.0"
+    "yaml": "^2.9.1"
   }
 }