diff --git a/dev-requirements.txt b/dev-requirements.txt
index 532c319f..626a8fdc 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -12,7 +12,7 @@ numpy; python_version<"3.10"
 pandas; python_version<"3.10"
 
 pyyaml>=5.4; python_version>="3.6"
-pyyaml<5.3.1; python_version<"3.6"
+pyyaml==5.3.1; python_version<"3.6"
 
 isort
 black; python_version>="3.6"
diff --git a/utils/generate-api.py b/utils/generate-api.py
index 32f3d090..7504057a 100644
--- a/utils/generate-api.py
+++ b/utils/generate-api.py
@@ -42,7 +42,7 @@ import black
 import unasync
 import urllib3
 from click.testing import CliRunner
-from jinja2 import Environment, FileSystemLoader, TemplateNotFound
+from jinja2 import Environment, FileSystemLoader, TemplateNotFound, select_autoescape
 
 http = urllib3.PoolManager()
 
@@ -67,6 +67,7 @@ GLOBAL_QUERY_PARAMS = {
 }
 
 jinja_env = Environment(
+    autoescape=select_autoescape(["html", "xml"]),
     loader=FileSystemLoader([CODE_ROOT / "utils" / "templates"]),
     trim_blocks=True,
     lstrip_blocks=True,