chore(deps): bump js-yaml from 3.14.2 to 3.15.0 in /redisinsight/ui/src/packages

[dependabot]

Bumps js-yaml from 3.14.2 to 3.15.0.

Changelog

Sourced from js-yaml's changelog.

4.3.0, 3.15.0 - 2026-06-27

Security

• Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

• Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.
• Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

• maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

• Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

• Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

• [breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

• Added named exports for schemas, tags, parser events and AST utilities.
• Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.
• Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.
• Added dump() transform option for changing the generated AST before rendering.
• Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.
• Added formal data layers (events and AST) for modular data pipelines.
  • Added low-level parser (to events), presenter and visitor APIs.
• Added the YAML Test Suite to the test set.

Changed

• See the migration guide for upgrade notes.
• Rewritten in TypeScript and reorganized the public API around flat named exports.

... (truncated)

Commits

• c34b6c4 3.15.0 released
• 21e13d3 dist rebuild
• 4165c62 Add v3-legacy tag for publish
• d8ff750 Add package lock
• 24f13e7 Added maxTotalMergeKeys (10000) loader option (v5 backport)
• See full diff in compare view

---

Note

Low Risk
Lockfile-only dependency patch with a security hardening default; low risk unless custom YAML parsing relied on unbounded merge behavior.

Overview
Updates the lockfile in redisinsight/ui/src/packages so resolved js-yaml moves from 3.14.2 to 3.15.0 (still under the existing ^3.13.1 range, pulled in transitively e.g. via @istanbuljs/load-nyc-config).

3.15.0 backports the maxTotalMergeKeys loader option from v5, which caps how many keys YAML merge (<<) can process in a single load() / loadAll() and mitigates merge-related abuse/DoS when parsing untrusted YAML. No application source changes—only yarn.lock.

^{Reviewed by Cursor Bugbot for commit 00a6cf4. Bugbot is set up for automated code reviews on this repo. Configure here.}

[jit-ci]

🛡️ Jit Security Scan Results

✅ No security findings were detected in this PR

---

^{Security scan by Jit}

[github-actions]

Code Coverage - Backend unit tests

St.❔	Category	Percentage	Covered / Total
🟢	Statements	93.11%	16501/17723
🟡	Branches	75.3%	5231/6947
🟢	Functions	87.41%	2527/2891
🟢	Lines	92.96%	15777/16972

Test suite run success

3647 tests passing in 319 suites.

Report generated by 🧪jest coverage report action from 00a6cf4

[github-actions]

Code Coverage - Integration Tests

Status	Category	Percentage	Covered / Total
🟡	Statements	79.15%	18180/22969
🟡	Branches	61.9%	8463/13670
🟡	Functions	66.88%	2456/3672
🟡	Lines	78.75%	17116/21732

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[github-actions]

Code Coverage - Frontend unit tests

St.❔	Category	Percentage	Covered / Total
🟢	Statements	83.58%	26560/31779
🟡	Branches	69.24%	11299/16319
🟡	Functions	78.9%	7114/9016
🟢	Lines	84.04%	25883/30798

Test suite run success

7525 tests passing in 844 suites.

Report generated by 🧪jest coverage report action from 00a6cf4