diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index 90b4adb5..6fc0368d 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-marketplace.json",
   "name": "aidd-framework",
-  "version": "5.0.2",
+  "version": "5.0.3",
   "description": "Official plugin marketplace for the AI-Driven Development framework",
   "owner": {
     "name": "AI-Driven Dev"
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index fa56eff3..4afd4c19 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,5 +1,5 @@
 {
-  ".": "5.0.2",
+  ".": "5.0.3",
   "plugins/aidd-context": "2.0.1",
   "plugins/aidd-dev": "2.0.0",
   "plugins/aidd-vcs": "2.0.0",
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 473eb113..aee95075 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [5.0.3](https://github.com/ai-driven-dev/framework/compare/v5.0.2...v5.0.3) (2026-06-23)
+
+
+### Miscellaneous
+
+* **deps-dev:** bump js-yaml from 4.2.0 to 5.0.0 ([#322](https://github.com/ai-driven-dev/framework/issues/322)) ([f71bdd2](https://github.com/ai-driven-dev/framework/commit/f71bdd2be31c34aa43e5280659432fb3a9f1cdab))
+
 ## [5.0.2](https://github.com/ai-driven-dev/framework/compare/v5.0.1...v5.0.2) (2026-06-22)
 
 
diff --git a/package.json b/package.json
index 8aa3446b..3a00677e 100644
--- a/package.json
+++ b/package.json
@@ -35,7 +35,7 @@
     "@commitlint/config-conventional": "^21.0.2",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",
-    "js-yaml": "4.2.0",
+    "js-yaml": "5.0.0",
     "lefthook": "^2.1.9"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2aaaa136..d2616131 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -21,8 +21,8 @@ importers:
         specifier: 3.0.1
         version: 3.0.1(ajv@8.20.0)
       js-yaml:
-        specifier: 4.2.0
-        version: 4.2.0
+        specifier: 5.0.0
+        version: 5.0.0
       lefthook:
         specifier: ^2.1.9
         version: 2.1.9
@@ -269,6 +269,10 @@ packages:
     resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
     hasBin: true
 
+  js-yaml@5.0.0:
+    resolution: {integrity: sha512-GSvaPUbk1U+FMZ7rJzF+F8e5YVtu7KnD40et/5rBXXRBv2jCO9L3qCewvIDDdudC0QycTFlf6EAA+h3kxBsuUw==}
+    hasBin: true
+
   json-parse-even-better-errors@2.3.1:
     resolution: {integrity: sha512-xyFwyhro/JEof6Ghe2iz2NcXoj2sloNsWr/XsERDK/oiPCfaNhl5ONfp+jQdAZRQQ0IJWNzH9zIZF7li91kh2w==}
 
@@ -654,6 +658,10 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
+  js-yaml@5.0.0:
+    dependencies:
+      argparse: 2.0.1
+
   json-parse-even-better-errors@2.3.1: {}
 
   json-schema-traverse@1.0.0: {}
diff --git a/scripts/validate-yaml.mjs b/scripts/validate-yaml.mjs
index e667e2f3..043bcc4a 100755
--- a/scripts/validate-yaml.mjs
+++ b/scripts/validate-yaml.mjs
@@ -2,14 +2,14 @@
 // Validates YAML syntax using the repository's Node dependency, avoiding Python in hooks.
 
 import { readFile } from "node:fs/promises";
-import yaml from "js-yaml";
+import { load } from "js-yaml";
 
 const files = process.argv.slice(2).filter((file) => file !== "--");
 const errors = [];
 
 for (const file of files) {
   try {
-    yaml.load(await readFile(file, "utf8"), { filename: file });
+    load(await readFile(file, "utf8"), { filename: file });
   } catch (error) {
     errors.push(`${file}: ${error.message}`);
   }