Skip to content

chore(deps): bump js-yaml from 4.3.0 to 5.2.2 - #12276

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-5.2.2
Closed

chore(deps): bump js-yaml from 4.3.0 to 5.2.2#12276
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-5.2.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 4.3.0 to 5.2.2.

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 31, 2026
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 31, 2026 06:05 Failure
@dependabot dependabot Bot mentioned this pull request Jul 31, 2026
Closed
@mergify

mergify Bot commented Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Merge Protections

🔴 1 of 6 protections blocking · waiting on 🤖 CI and 🙋 you

Protection Waiting on
🔴 🤖 Continuous Integration 🤖 CI and 🙋 you
🟢 👀 Review Requirements —
🟢 Enforce conventional commit —
🟢 🔎 Reviews —
🟢 📕 PR description —
🟢 🚦 Auto-queue —

🔴 🤖 Continuous Integration

Waiting for

  • check-success = build
  • check-success = lint
  • check-success = test
  • any of:
    • check-success = test-broken-links
    • label = ignore-broken-links
This rule is failing.
  • all of:
    • check-success = build
    • check-success = lint
    • check-success = test
    • any of:
      • check-success = test-broken-links
      • label = ignore-broken-links
    • any of:
      • check-success=Cloudflare Pages
      • -head-repo-full-name~=^Mergifyio/
Show 5 satisfied protections

🟢 👀 Review Requirements

  • any of:
    • author = dependabot[bot]
    • #approved-reviews-by >= 2
    • all of:
      • author = mergify-ci-bot
      • -head ~= ^docs-agent/

🟢 Enforce conventional commit

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

  • title ~= ^(fix|feat|internal|docs|style|refactor|perf|test|build|ci|chore|revert|ui)(?:\(.+\))?!?:

🟢 🔎 Reviews

  • #changes-requested-reviews-by = 0
  • #review-requested = 0
  • #review-threads-unresolved = 0

🟢 📕 PR description

  • body ~= (?ms:.{48,})

🟢 🚦 Auto-queue

When all merge protections are satisfied, this pull request will be queued automatically.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from 428515f to 1028070 Compare July 31, 2026 06:22
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections July 31, 2026 06:23 Failure
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from 1028070 to 5a2fb09 Compare August 3, 2026 07:03
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections August 3, 2026 07:03 Failure
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from 5a2fb09 to 5b32b9b Compare August 4, 2026 06:20
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections August 4, 2026 06:20 Failure
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from 5b32b9b to 6ed18fb Compare August 4, 2026 06:34
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections August 4, 2026 06:34 Failure
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from 6ed18fb to d49ae06 Compare August 5, 2026 06:14
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections August 5, 2026 06:15 Failure
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from d49ae06 to d6551d9 Compare August 5, 2026 06:26
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections August 5, 2026 06:26 Failure
@mergify

mergify Bot commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

@dependabot[bot] this pull request is now in conflict 😩

@mergify mergify Bot added the conflict label Aug 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from d6551d9 to 53c635c Compare August 5, 2026 06:48
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections August 5, 2026 06:49 Failure
@mergify mergify Bot removed the conflict label Aug 5, 2026
@dependabot
chore(deps): bump js-yaml from 4.3.0 to 5.2.2
bd40871 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.0 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...5.2.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from 53c635c to bd40871 Compare August 6, 2026 07:10
@mergify
mergify Bot had a problem deploying to Mergify Merge Protections August 6, 2026 07:11 Failure
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #12345.

@dependabot dependabot Bot closed this Aug 10, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/js-yaml-5.2.2 branch August 10, 2026 06:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants