diff --git a/packages/files/CHANGELOG.md b/packages/files/CHANGELOG.md
index 024d822f..b94975d2 100644
--- a/packages/files/CHANGELOG.md
+++ b/packages/files/CHANGELOG.md
@@ -2,7 +2,9 @@
 
 ## [Unreleased]
 
-No notable changes.
+### Changed
+
+- Bump dependency on [yaml] to 2.6.1 ([#1047](https://github.com/cerbos/cerbos-sdk-javascript/pull/1047))
 
 ## [0.2.10] - 2024-10-30
 
diff --git a/packages/files/changelog.yaml b/packages/files/changelog.yaml
index 442ff91b..00380a1b 100644
--- a/packages/files/changelog.yaml
+++ b/packages/files/changelog.yaml
@@ -1,6 +1,11 @@
 unreleased:
   type: patch
 
+  bumped:
+    yaml:
+      to: 2.6.1
+      pull: 1047
+
 releases:
   - version: 0.2.10
     date: 2024-10-30
diff --git a/packages/files/package.json b/packages/files/package.json
index 2102a97c..d425dfc6 100644
--- a/packages/files/package.json
+++ b/packages/files/package.json
@@ -49,7 +49,7 @@
   ],
   "dependencies": {
     "@cerbos/core": "^0.18.1",
-    "yaml": "^2.6.0"
+    "yaml": "^2.6.1"
   },
   "publishConfig": {
     "access": "public",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e9a603d3..41643268 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -90,8 +90,8 @@ importers:
         specifier: ^0.18.1
         version: link:../core
       yaml:
-        specifier: ^2.6.0
-        version: 2.6.0
+        specifier: ^2.6.1
+        version: 2.6.1
 
   packages/grpc:
     dependencies:
@@ -2775,6 +2775,11 @@ packages:
     engines: {node: '>= 14'}
     hasBin: true
 
+  yaml@2.6.1:
+    resolution: {integrity: sha512-7r0XPzioN/Q9kXBro/XPnA6kznR73DHq+GXh5ON7ZozRO6aMjbmiBuKste2wslTFkC5d1dw0GooOCepZXJ2SAg==}
+    engines: {node: '>= 14'}
+    hasBin: true
+
   yargs-parser@20.2.9:
     resolution: {integrity: sha512-y11nGElTIV+CT3Zv9t7VKl+Q3hTQoT9a1Qzezhhl6Rp21gJ/IVTW7Z3y9EWXhuUBC2Shnf+DX0antecpAwSP8w==}
     engines: {node: '>=10'}
@@ -5396,6 +5401,8 @@ snapshots:
 
   yaml@2.6.0: {}
 
+  yaml@2.6.1: {}
+
   yargs-parser@20.2.9: {}
 
   yargs-parser@21.1.1: {}