diff --git a/go.mod b/go.mod
index 7dd2bed62..f628c93e9 100644
--- a/go.mod
+++ b/go.mod
@@ -13,14 +13,17 @@ require (
 	github.com/openstack-k8s-operators/lib-common/modules/database v0.0.0-20230522113906-6f4206cbf317
 	github.com/openstack-k8s-operators/lib-common/modules/openstack v0.0.0-20230522113906-6f4206cbf317
 	github.com/openstack-k8s-operators/mariadb-operator/api v0.0.0-20230517052836-8478be8b3aaa
-	gopkg.in/yaml.v2 v2.4.0
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 	k8s.io/api v0.26.3
 	k8s.io/apimachinery v0.26.3
 	k8s.io/client-go v0.26.3
 	sigs.k8s.io/controller-runtime v0.14.6
 )
 
-require github.com/k8snetworkplumbingwg/network-attachment-definition-client v1.4.0
+require (
+	github.com/k8snetworkplumbingwg/network-attachment-definition-client v1.4.0
+	gopkg.in/yaml.v2 v2.4.0
+)
 
 require (
 	github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 // indirect
@@ -74,7 +77,6 @@ require (
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/protobuf v1.28.1 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
-	gopkg.in/yaml.v3 v3.0.1 // indirect
 	k8s.io/apiextensions-apiserver v0.26.2 // indirect; indirect // indirect
 	k8s.io/component-base v0.26.2 // indirect; indirect // indirect
 	k8s.io/klog/v2 v2.80.1 // indirect