diff --git a/dockerfiles/crane/Dockerfile b/dockerfiles/crane/Dockerfile
index 15b9f5dd2..f0122d9b8 100644
--- a/dockerfiles/crane/Dockerfile
+++ b/dockerfiles/crane/Dockerfile
@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 FROM gcr.io/go-containerregistry/crane as crane
-FROM mikefarah/yq:4.49.1 AS yq
+FROM mikefarah/yq:4.49.2 AS yq
 
 FROM golang:1.25.4
 COPY --from=yq /usr/bin/yq /usr/local/bin