diff --git a/Cargo.lock b/Cargo.lock
index 7f35fb5..1141d0d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2744,9 +2744,9 @@ checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
 
 [[package]]
 name = "yaml-rust2"
-version = "0.12.0"
+version = "0.13.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c6edb26322e610d4f04b7cd34478317685d24d0999437e551fb97c5441151041"
+checksum = "57e5b818a27a4cd30884ea380857a5e56f7ec3ba24a3990a3cc0b95af3238e18"
 dependencies = [
  "arraydeque",
  "hashlink",
diff --git a/Cargo.toml b/Cargo.toml
index 9e38392..59f4e6f 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -95,4 +95,4 @@ proptest = "1.9.0"
 # the archived `serde_yaml`. `default-features = false` drops the `encoding`
 # feature (and its `encoding_rs` dependency): the checks parse UTF-8 `&str`
 # inputs, so charset detection is unnecessary. See docs/dependencies.md.
-yaml-rust2 = { version = "0.12.0", default-features = false }
+yaml-rust2 = { version = "0.13.0", default-features = false }