Skip to content

chore(dev): update dependency js-yaml to v5.4.1 - #1501

Open
fro-bot[bot] wants to merge 1 commit into
mainfrom
renovate/js-yaml-5.x
Open

chore(dev): update dependency js-yaml to v5.4.1#1501
fro-bot[bot] wants to merge 1 commit into
mainfrom
renovate/js-yaml-5.x

Conversation

@fro-bot

@fro-bot fro-bot Bot commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence OpenSSF Code Search
js-yaml 5.3.05.4.1 age confidence OpenSSF Scorecard GitHub Code Search for "js-yaml"

Release Notes

nodeca/js-yaml (js-yaml)

v5.4.1

Compare Source

Changed
  • Hard-limit merge sequence size to 100.
Security
  • Count empty mappings in merge sequences toward maxTotalMergeKeys to limit
    CPU usage, #​797.

v5.4.0

Compare Source

Added
  • Added the scalarStyleRules dumper option to customize string formatting.
    See Scalar styling for details.
Changed
  • [breaking] Flattened the low-level AST node style representation. Scalar
    and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values;
    explicit tags use the separate tagged property. Alias nodes now contain
    only kind and anchor. This only affects code that directly constructs or
    edits AST nodes.
  • [breaking] The sortKeys option was rewritten using AST mutation to avoid
    side effects.
  • Reworked scalar style selection. This can change formatting without changing
    loaded values; in particular, whitespace-only strings are now double-quoted.
Fixed
  • Accept a byte order mark at the start of each document in a stream, #​791.
  • Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace,
    including alias and property-only keys, #​786.
  • Preserve empty scalar items when converting block sequences to flow style.
  • Do not apply the 1024-character simple-key limit to flow mapping keys.
  • Count Unicode code points, rather than UTF-16 code units, for the
    1024-character simple-key limit.
  • Add an explicit document-end marker after keep-chomped block scalars when
    needed to preserve trailing newlines.

Configuration

📅 Schedule: (in timezone America/Phoenix)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@fro-bot
fro-bot Bot requested review from fro-bot and marcusrbrown as code owners August 30, 2026 00:02
@fro-bot fro-bot Bot added automerge dependencies Dependency updates or security alerts javascript minor renovate Universal dependency update tool <https://mend.io/renovate> labels Aug 30, 2026
@fro-bot
fro-bot Bot enabled auto-merge (squash) August 30, 2026 00:03
@fro-bot
fro-bot Bot force-pushed the renovate/js-yaml-5.x branch 5 times, most recently from 996cc63 to 21d9d55 Compare August 30, 2026 02:44
@fro-bot
fro-bot Bot force-pushed the renovate/js-yaml-5.x branch 2 times, most recently from 2c6aa56 to df0e9ec Compare August 30, 2026 03:55
@fro-bot fro-bot Bot mentioned this pull request Aug 30, 2026
72 tasks
@fro-bot
fro-bot Bot force-pushed the renovate/js-yaml-5.x branch 5 times, most recently from 5b062d1 to 8fd7449 Compare August 31, 2026 19:59
@fro-bot
fro-bot Bot force-pushed the renovate/js-yaml-5.x branch from 8fd7449 to 8d668ef Compare September 2, 2026 06:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge dependencies Dependency updates or security alerts minor renovate Universal dependency update tool <https://mend.io/renovate>

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants