Skip to content

build(deps): bump js-yaml from 4.3.0 to 5.2.2#2822

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/js-yaml-5.2.1
Open

build(deps): bump js-yaml from 4.3.0 to 5.2.2#2822
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/js-yaml-5.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 4.3.0 to 5.2.2.

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm labels Jul 6, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 6, 2026 15:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm labels Jul 6, 2026
@dependabot dependabot Bot mentioned this pull request Jul 6, 2026
Closed
@github-actions
github-actions Bot enabled auto-merge July 6, 2026 15:04
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch 3 times, most recently from 783ecbb to 8884755 Compare July 6, 2026 15:38
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from 8884755 to 4569f77 Compare July 13, 2026 15:15
@dependabot dependabot Bot changed the title build(deps): bump js-yaml from 4.2.0 to 5.2.1 build(deps): bump js-yaml from 4.3.0 to 5.2.1 Jul 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch 5 times, most recently from 5a9bd48 to 663836c Compare July 20, 2026 15:26
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch 4 times, most recently from 63ce6c8 to 5e3d7e6 Compare July 21, 2026 09:06
@dependabot dependabot Bot changed the title build(deps): bump js-yaml from 4.3.0 to 5.2.1 build(deps): bump js-yaml from 4.3.0 to 5.2.2 Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch 3 times, most recently from 9a71ab6 to 3a7988c Compare July 23, 2026 23:46
@dependabot
build(deps): bump js-yaml from 4.3.0 to 5.2.2
33ba644 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.0 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...5.2.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from 3a7988c to 33ba644 Compare July 23, 2026 23:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file npm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants