diff --git a/package.json b/package.json
index 1e9f0a7..0448bc7 100644
--- a/package.json
+++ b/package.json
@@ -52,7 +52,7 @@
   "dependencies": {
     "chalk": "^2.4.1",
     "lodash": "^4.17.10",
-    "node-yaml": "^3.1.1"
+    "node-yaml": "^4.0.0"
   },
   "peerDependencies": {
     "webpack": "^4.32.0"
diff --git a/yarn.lock b/yarn.lock
index 2e69ef6..0f577d2 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2615,7 +2615,7 @@ jquery@^3.3.1:
   resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
   integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==
 
-js-yaml@^3.13.1, js-yaml@^3.13.x:
+js-yaml@^3.13.1:
   version "3.13.1"
   resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.13.1.tgz#aff151b30bfdfa8e49e05da22e7415e9dfa37847"
   integrity sha512-YfbcO7jXDdyj0DGxYVSlSeQNHbD7XPWvrVWeVUujrQEoZzWJIRrCPoyk6kL6IAjAG2IolMK4T0hNUe0HOUs5Jw==
@@ -2710,10 +2710,10 @@ jsprim@^1.2.2:
     json-schema "0.2.3"
     verror "1.10.0"
 
-junk@3.0.0:
-  version "3.0.0"
-  resolved "https://registry.yarnpkg.com/junk/-/junk-3.0.0.tgz#f0454fb7ef9bcf67e2c32214dde22c08cadfc629"
-  integrity sha512-8oLnegfzPD/7V2oLI+kacn941P7IEYKDdjbwBJQWqWFdoZduX+YOJIrZEEYehd9aSk00J2m+l3fppxAmAc4sXQ==
+junk@3.1.0:
+  version "3.1.0"
+  resolved "https://registry.yarnpkg.com/junk/-/junk-3.1.0.tgz#31499098d902b7e98c5d9b9c80f43457a88abfa1"
+  integrity sha512-pBxcB3LFc8QVgdggvZWyeys+hnrNWg4OcZIU/1X59k5jQdLBlCsYGRQaz234SqoRLTCgMH00fY0xRJH+F9METQ==
 
 kind-of@^3.0.2, kind-of@^3.0.3, kind-of@^3.2.0:
   version "3.2.2"
@@ -3114,14 +3114,13 @@ node-pre-gyp@^0.12.0:
     semver "^5.3.0"
     tar "^4"
 
-node-yaml@^3.1.1:
-  version "3.2.0"
-  resolved "https://registry.yarnpkg.com/node-yaml/-/node-yaml-3.2.0.tgz#0bc04713d4a9342e8fb92caf7b5fa8d305037852"
-  integrity sha512-5c7TNdFOLOaY/TN0fBDrfJg+N6Z1+Ch7O/QuN2wostfo9Q4qbpOTAjk1WZ3bxgSfRPrJF4rgWdL26N2Svdljhw==
+node-yaml@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/node-yaml/-/node-yaml-4.0.0.tgz#510653c0471fcd83067eac63cb03593ed966b38d"
+  integrity sha512-F7PwidzUFOdfg18xXoAwQo00Wez5zCPmZ7AsnAQ85RvAwkmrOVcr5KywAc7EKIvQWvvfHPj8tEIoHxuQOAFOBA==
   dependencies:
     co "4.6.0"
-    js-yaml "^3.13.x"
-    junk "3.0.0"
+    junk "3.1.0"
     promise-fs "2.1.0"
 
 nopt@^4.0.1: