Skip to content

Bump js-yaml from 4.3.0 to 5.2.2 - #833

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/js-yaml-4.3.0
Open

Bump js-yaml from 4.3.0 to 5.2.2#833
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/js-yaml-4.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps js-yaml from 4.3.0 to 5.2.2.

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor Release with a minor level update labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 27, 2026 18:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file minor Release with a minor level update javascript Pull requests that update javascript code labels Jul 27, 2026
@dependabot
Bump js-yaml from 4.3.0 to 5.2.2
7003fe6 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.0 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...5.2.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump js-yaml from 4.2.0 to 4.3.0 Bump js-yaml from 4.3.0 to 5.2.2 Jul 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.3.0 branch from adcae54 to 7003fe6 Compare July 28, 2026 00:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code minor Release with a minor level update

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants