diff --git a/debian/changelog b/debian/changelog
index e7b6d6bf11c3558cb64e80ff2f7a7a2b21ef5c17..f6c5f8cff6e0786de81d6f7132207dee5275a4cd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,7 @@ ruby-faraday-middleware (1.2.0-1~1.gbpff3e98) UNRELEASED; urgency=medium
 
   * Team upload.
   * New upstream release.
+  * d/control (Build-Depends): Add ruby-safe-yaml (closes: #1026479).
   * d/watch: Fix download URL.
   * UNRELEASED
 
diff --git a/debian/control b/debian/control
index 6880bce51ce530a324cd4f60398a831f3e0d049e..53e0fb5065d682389ee4a3535e6dcddb67e9e78d 100644
--- a/debian/control
+++ b/debian/control
@@ -10,10 +10,11 @@ Build-Depends: debhelper-compat (= 13),
                ruby-json,
                ruby-multi-xml,
                ruby-rack-cache,
+               ruby-rash-alt,
                ruby-rspec,
+               ruby-safe-yaml,
                ruby-simple-oauth,
-               ruby-webmock,
-               ruby-rash-alt
+               ruby-webmock
 Standards-Version: 4.6.1
 Vcs-Git: https://salsa.debian.org/ruby-team/ruby-faraday-middleware.git
 Vcs-Browser: https://salsa.debian.org/ruby-team/ruby-faraday-middleware