diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index a280a7c90..a64ecff70 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -20,6 +20,8 @@ minimumReleaseAgeExclude:
   - '@opentelemetry/core@2.8.0'
   # Renovate security update: brace-expansion@5.0.8
   - brace-expansion@5.0.8
+  # Renovate security update: js-yaml@4.3.1
+  - js-yaml@4.3.1
 
 catalog:
   '@livekit/rtc-node': ^0.13.33
@@ -37,7 +39,7 @@ overrides:
   'lodash@<4.18.0': ^4.18.0
   'protobufjs@<7.6.5': ^7.6.5
   'ws@>=8.0.0 <8.21.0': ^8.21.0
-  'js-yaml@<3.15.0': ^3.15.0
+  'js-yaml@<3.15.0': ^4.3.1
   'js-yaml@>=4.0.0 <4.3.0': ^4.3.0
   'minimatch@<3.1.3': ^3.1.3
   'minimatch@>=9.0.0 <9.0.7': ^9.0.7