Skip to content

Bump js-yaml from 5.2.1 to 5.2.3 in the yaml group across 1 directory - #52

Open
dependabot[bot] wants to merge 1 commit into
dependenciesfrom
dependabot/npm_and_yarn/dependencies/yaml-5025097e58
Open

Bump js-yaml from 5.2.1 to 5.2.3 in the yaml group across 1 directory#52
dependabot[bot] wants to merge 1 commit into
dependenciesfrom
dependabot/npm_and_yarn/dependencies/yaml-5025097e58

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the yaml group with 1 update in the / directory: js-yaml.

Updates js-yaml from 5.2.1 to 5.2.3

Changelog

Sourced from js-yaml's changelog.

[5.2.3] - 2026-08-01

Fixed

  • Prevent prototype fallback when resolving tags and mapping entries, #782.
  • Resolve !!timestamp years 0000-0099 correctly, #775.
  • Preserve implicit null mapping values before document markers and reject unpaired mapping event streams, #784.
  • Preserve folded scalar values with tab-indented lines when round-tripping a parsed AST through present(); dump() and loading are unaffected, #780.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.
Commits
  • 6740445 5.2.3 released
  • 94e766d Update changelog
  • c3bd7ca Polish previous commit, #780
  • 00209b6 presenter: treat a tab-indented line in a folded scalar as more-indented (#780)
  • 40fcb4f Fix missing mapping values before document markers and reject unpaired mappin...
  • 49280f3 Fix !!timestamp resolution for years 0000-0099, #775
  • 355dc96 fix: prevent prototype fallback in tag and harden object lookups, #782 (than...
  • d524f83 docs: add contributing guidelines
  • 3c29559 5.2.2 released
  • 3e5240f parser: avoid reparsing flow sequence pair keys
  • Additional commits viewable in compare view

@dependabot dependabot Bot added bot dependencies Pull requests that update a dependency file labels Jul 28, 2026
Bumps the yaml group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml).


Updates `js-yaml` from 5.2.1 to 5.2.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.1...5.2.3)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: yaml
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot changed the title Bump js-yaml from 5.2.1 to 5.2.2 in the yaml group Bump js-yaml from 5.2.1 to 5.2.3 in the yaml group across 1 directory Aug 4, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies/yaml-5025097e58 branch from 1f3fa49 to c869dcb Compare August 4, 2026 10:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bot dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant