diff --git a/velocity/build.gradle.kts b/velocity/build.gradle.kts
index c7b0c1e..ecdfe7b 100644
--- a/velocity/build.gradle.kts
+++ b/velocity/build.gradle.kts
@@ -15,7 +15,7 @@ dependencies {
     // plugin-proxy owns the ProxyServiceRegistry at runtime — compileOnly, never shaded, or the
     // registry this plugin writes into would be a different class from the one chat/social read.
     compileOnly("gg.grounds:plugin-proxy-api:0.5.0")
-    implementation("tools.jackson.dataformat:jackson-dataformat-yaml:3.0.4")
+    implementation("tools.jackson.dataformat:jackson-dataformat-yaml:3.2.2")
     implementation("tools.jackson.module:jackson-module-kotlin:3.2.2")
 
     // compileOnly above is not visible to tests; PlayerSessionQueryImplTest needs the interface's