diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 00ea74a..4567a45 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -4,12 +4,13 @@
   rangeStrategy: "bump",
   packageRules: [
     {
-      groupName: "GitHub Actions",
-      matchManagers: ["github-actions"],
+      groupName: "non-major dev-dependencies",
+      matchDepTypes: ["devDependencies"],
+      matchUpdateTypes: ["minor", "patch"],
     },
     {
-      groupName: "devDependencies",
-      matchDepTypes: ["devDependencies"],
+      groupName: "GitHub Actions",
+      matchManagers: ["github-actions"],
     },
   ],
   ignoreDeps: ["node"],
diff --git a/package-lock.json b/package-lock.json
index 742f692..34d82c7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "function-once": "^3.0.1",
         "import-meta-resolve": "^4.2.0",
         "is-binary-path": "^3.0.0",
-        "js-yaml": "^5.1.0",
+        "js-yaml": "^5.2.2",
         "json-sorted-stringify": "^1.0.2",
         "json5": "^2.2.3",
         "kasi": "^2.0.1",
@@ -4542,9 +4542,9 @@
       "dev": true
     },
     "node_modules/js-yaml": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.1.0.tgz",
-      "integrity": "sha512-s8VA5jkR8f22S3NAXmhKPFqGUduqZGlsufabVOgN14iTdw/RXcym7bKkbwjxLK9Yw2lEvvmJjFp119+KPeo8Kg==",
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.2.tgz",
+      "integrity": "sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==",
       "funding": [
         {
           "type": "github",
@@ -10223,9 +10223,9 @@
       "dev": true
     },
     "js-yaml": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.1.0.tgz",
-      "integrity": "sha512-s8VA5jkR8f22S3NAXmhKPFqGUduqZGlsufabVOgN14iTdw/RXcym7bKkbwjxLK9Yw2lEvvmJjFp119+KPeo8Kg==",
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.2.tgz",
+      "integrity": "sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==",
       "requires": {
         "argparse": "^2.0.1"
       }
diff --git a/package.json b/package.json
index dc43720..41bbe81 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "function-once": "^3.0.1",
     "import-meta-resolve": "^4.2.0",
     "is-binary-path": "^3.0.0",
-    "js-yaml": "^5.1.0",
+    "js-yaml": "^5.2.2",
     "json-sorted-stringify": "^1.0.2",
     "json5": "^2.2.3",
     "kasi": "^2.0.1",