diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index 86999c9d..6ae6334b 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -14,6 +14,11 @@ Active Maintainers:
 === Releases ===
 ------------------------------------------------------------------------
 
+2.18.1 (not yet released)
+
+#499: (yaml) SnakeYAML upgrade to 2.3
+ (contributed by @pjfanning)
+
 2.18.0 (26-Sep-2024)
 
 #442: (csv) Allow use of "value decorators" (like `[` and `]` for arrays)
diff --git a/yaml/pom.xml b/yaml/pom.xml
index a1fcd149..ad5d6adb 100644
--- a/yaml/pom.xml
+++ b/yaml/pom.xml
@@ -34,7 +34,7 @@
     <dependency>
       <groupId>org.yaml</groupId>
       <artifactId>snakeyaml</artifactId>
-      <version>2.2</version>
+      <version>2.3</version>
     </dependency>
 
      <!-- and for testing need annotations; but should be available via `jackson-databind` above