Skip to content

chore(deps): bump js-yaml from 4.3.0 to 5.2.1 - #12069

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-5.2.1
Open

chore(deps): bump js-yaml from 4.3.0 to 5.2.1#12069
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-5.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 4.3.0 to 5.2.1.

Changelog

Sourced from js-yaml's changelog.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).
Commits
  • ac16b42 5.2.1 released
  • 4a864e5 Deps bump
  • 39f3211 !!omap: add Map support and remove quadratic complexity
  • ff17f1e Changelog update
  • 8ed15f1 deps bump
  • 1a562dc Fix changelog link
  • c28ed5e 5.2.0 released
  • 125cd5a Add maxAliases option
  • 3105455 Replace maxMergeSeqLengthoption with maxTotalMergeKeys (more robust)
  • 39d00d6 numbers: Drop boxed numbers support, simplify .identify() checks, clarify rou...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 9, 2026
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 9, 2026 06:38 Failure
@dependabot dependabot Bot mentioned this pull request Jul 9, 2026
Closed
@mergify

mergify Bot commented Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Merge Protections

🔴 1 of 6 protections blocking · waiting on 🤖 CI and 🙋 you

Protection Waiting on
🔴 🤖 Continuous Integration 🤖 CI and 🙋 you
🟢 👀 Review Requirements —
🟢 Enforce conventional commit —
🟢 🔎 Reviews —
🟢 📕 PR description —
🟢 🚦 Auto-queue —

🔴 🤖 Continuous Integration

Waiting for

  • check-success = build
  • check-success = lint
  • check-success = test
  • any of:
    • check-success = test-broken-links
    • label = ignore-broken-links
This rule is failing.
  • all of:
    • check-success = build
    • check-success = lint
    • check-success = test
    • any of:
      • check-success = test-broken-links
      • label = ignore-broken-links
    • any of:
      • check-success=Cloudflare Pages
      • -head-repo-full-name~=^Mergifyio/
Show 5 satisfied protections

🟢 👀 Review Requirements

  • any of:
    • author = dependabot[bot]
    • #approved-reviews-by >= 2
    • author = mergify-ci-bot

🟢 Enforce conventional commit

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

  • title ~= ^(fix|feat|internal|docs|style|refactor|perf|test|build|ci|chore|revert|ui)(?:\(.+\))?!?:

🟢 🔎 Reviews

  • #changes-requested-reviews-by = 0
  • #review-requested = 0
  • #review-threads-unresolved = 0

🟢 📕 PR description

  • body ~= (?ms:.{48,})

🟢 🚦 Auto-queue

When all merge protections are satisfied, this pull request will be queued automatically.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from e062c1e to f182094 Compare July 9, 2026 06:41
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 9, 2026 06:41 Failure
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from f182094 to 1f18394 Compare July 10, 2026 07:07
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 10, 2026 07:07 Failure
@mergify

mergify Bot commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

@dependabot[bot] this pull request is now in conflict 😩

@mergify mergify Bot added the conflict label Jul 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from 1f18394 to 6c25202 Compare July 10, 2026 07:17
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 10, 2026 07:17 Failure
@mergify mergify Bot removed the conflict label Jul 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from 6c25202 to e76f62a Compare July 16, 2026 06:16
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 16, 2026 06:16 Failure
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from e76f62a to 4dcc1ff Compare July 17, 2026 06:21
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 17, 2026 06:21 Failure
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from 4dcc1ff to 44963e4 Compare July 20, 2026 06:39
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 20, 2026 06:40 Failure
@mergify

mergify Bot commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

@dependabot[bot] this pull request is now in conflict 😩

@mergify mergify Bot added the conflict label Jul 24, 2026
@dependabot dependabot Bot changed the title chore(deps): bump js-yaml from 4.2.0 to 5.2.1 chore(deps): bump js-yaml from 4.3.0 to 5.2.1 Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from 44963e4 to 3867fc2 Compare July 24, 2026 06:22
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 24, 2026 06:22 Failure
@mergify mergify Bot removed the conflict label Jul 24, 2026
@dependabot
chore(deps): bump js-yaml from 4.3.0 to 5.2.1
ad230c1 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.0 to 5.2.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...5.2.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.1 branch from 3867fc2 to ad230c1 Compare July 27, 2026 06:19
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 27, 2026 06:20 Failure
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants