Skip to content

chore(deps): update dependency yamldotnet to 18.1.0#978

Merged
amanda-tarafa merged 1 commit into
googleapis:mainfrom
renovate-bot:renovate/yamldotnet-18.x
Jun 29, 2026
Merged

chore(deps): update dependency yamldotnet to 18.1.0#978
amanda-tarafa merged 1 commit into
googleapis:mainfrom
renovate-bot:renovate/yamldotnet-18.x

Conversation

@renovate-bot

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
YamlDotNet (source) 18.0.018.1.0 age confidence

Release Notes

aaubry/YamlDotNet (YamlDotNet)

v18.1.0: Release 18.1.0

What's Changed

New Contributors

Full Changelog: aaubry/YamlDotNet@v18.0.0...v18.1.0

Breaking

  • Maximum depth of yaml files is now 130 by default. If you need higher you will need to adjust the maximum yaml depth. Going above 130 runs the risk of stack overflow exceptions when any exception happens inside of the deserialization

Configuration

📅 Schedule: (in timezone Europe/London)

  • Branch creation
    • "before 8am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested a review from a team as a code owner June 27, 2026 01:44
@trusted-contributions-gcf trusted-contributions-gcf Bot added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Jun 27, 2026

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the YamlDotNet package version from 18.0.0 to 18.1.0 in Directory.Packages.props. The review feedback highlights that this upgrade introduces a default maximum recursion limit of 130, which may cause deserialization failures for deeply nested YAML configurations, and recommends configuring an explicit limit if necessary.

Comment thread Directory.Packages.props
<PackageVersion Include="Newtonsoft.Json" Version="13.0.4" />
<PackageVersion Include="CommandLineParser" Version="2.9.1" />
<PackageVersion Include="YamlDotNet" Version="18.0.0" />
<PackageVersion Include="YamlDotNet" Version="18.1.0" />

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The upgrade to YamlDotNet 18.1.0 introduces a default maximum recursion limit of 130. For very large or deeply nested YAML configurations, this can cause deserialization to fail with an exception. If the generator processes complex, deeply nested YAML files, configure the parser/deserializer with an explicit maximum recursion limit to prevent unexpected runtime failures.

References
  1. When upgrading third-party dependencies, verify whether the codebase actually utilizes the specific interfaces or classes affected by breaking changes before implementing suggested fixes.

@amanda-tarafa amanda-tarafa merged commit 1c62eef into googleapis:main Jun 29, 2026
11 checks passed
@renovate-bot renovate-bot deleted the renovate/yamldotnet-18.x branch June 29, 2026 03:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kokoro:force-run Add this label to force Kokoro to re-run the tests.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants