Skip to content

chore(deps-dev): Bump js-yaml from 4.3.1 to 4.3.2 - #6057

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-4.3.2
Sep 9, 2026
Merged

chore(deps-dev): Bump js-yaml from 4.3.1 to 4.3.2#6057
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-4.3.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 4.3.1 to 4.3.2.

Changelog

Sourced from js-yaml's changelog.

4.3.2 - 2026-08-26

Changed

  • [backport] Hard-limit merge sequence size to 100.

Security

  • [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.
Commits

@dependabot dependabot Bot added 3. to review Ready to be reviewed dependencies Pull requests that update a dependency file labels Sep 8, 2026
@dependabot dependabot Bot added 3. to review Ready to be reviewed dependencies Pull requests that update a dependency file labels Sep 8, 2026
@github-actions
github-actions Bot enabled auto-merge September 8, 2026 23:04
@elzody

elzody commented Sep 9, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.1 to 4.3.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.1...4.3.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.3.2 branch from f9705a8 to 9e37fd4 Compare September 9, 2026 17:57
@github-actions
github-actions Bot merged commit cddb761 into main Sep 9, 2026
44 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/js-yaml-4.3.2 branch September 9, 2026 18:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Ready to be reviewed dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant