Skip to content

chore(deps): bump yaml from 2.8.2 to 2.8.3 in /packages/opencode#473

Merged
anandgupta42 merged 2 commits intomainfrom
dependabot/npm_and_yarn/packages/opencode/yaml-2.8.3
Mar 26, 2026
Merged

chore(deps): bump yaml from 2.8.2 to 2.8.3 in /packages/opencode#473
anandgupta42 merged 2 commits intomainfrom
dependabot/npm_and_yarn/packages/opencode/yaml-2.8.3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps yaml from 2.8.2 to 2.8.3.

Release notes

Sourced from yaml's releases.

v2.8.3

  • Add trailingComma ToString option for multiline flow formatting (#670)
  • Catch stack overflow during node composition (1e84ebb)
Commits
  • ce14587 2.8.3
  • 1e84ebb fix: Catch stack overflow during node composition
  • 6b24090 ci: Include Prettier check in lint action
  • 9424dee chore: Refresh lockfile
  • d1aca82 Add trailingComma ToString option for multiline flow formatting (#670)
  • 4321509 ci: Drop the branch filter from GitHub PR actions
  • 47207d0 chore: Update docs-slate
  • 5212fae chore: Update docs-slate
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [yaml](https://github.com/eemeli/yaml) from 2.8.2 to 2.8.3.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.2...v2.8.3)

---
updated-dependencies:
- dependency-name: yaml
  dependency-version: 2.8.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 26, 2026
Copy link

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review.

Tip: disable this comment in your organization's Code Review settings.

@github-actions
Copy link

This PR doesn't fully meet our contributing guidelines and PR template.

What needs to be fixed:

  • PR description is missing required template sections. Please use the PR template.

Please edit this PR description to address the above within 2 hours, or it will be automatically closed.

If you believe this was flagged incorrectly, please let a maintainer know.

@github-actions
Copy link

Thanks for your contribution!

This PR doesn't have a linked issue. All PRs must reference an existing issue.

Please:

  1. Open an issue describing the bug/feature (if one doesn't exist)
  2. Add Fixes #<number> or Closes #<number> to this PR description

See CONTRIBUTING.md for details.

anandgupta42 added a commit that referenced this pull request Mar 26, 2026
**#469 — `sql_execute` crash: `getStatementTypes is not a function`**
- Safe-import `@altimateai/altimate-core` with `typeof` guard
- Regex fallback classifier when napi binary unavailable
- Null/undefined input guards on `classify()` and `classifyAndCheck()`
- 42 adversarial tests (fallback parity, ReDoS, bypass attempts)

**#470 — `edit` tool: "Could not find oldString" context drift**
- `buildNotFoundMessage()` finds closest-matching line via Levenshtein
- Error now shows line number + 5-line snippet of actual file content
- Tells model to re-read the file instead of retrying blindly
- 14 adversarial tests (similarity scoring, truncation, edge cases)

**#471 — `webfetch`: 934 daily failures from invalid/broken URLs**
- `URL` constructor validation before fetch (catches malformed URLs)
- Session-level 404/410/451 failure cache with 5-min TTL
- Actionable error messages per HTTP status (404: "Do NOT retry",
  429: includes `Retry-After`, 500: "transient — retry once")
- 24 tests (validation, cache TTL, error messages, edge cases)

**#473 — Bump `yaml` 2.8.2 → 2.8.3**
- Stack overflow fix during node composition (security)

Closes #469, Closes #470, Closes #471, Closes #473

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@anandgupta42 anandgupta42 merged commit 959d580 into main Mar 26, 2026
5 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/packages/opencode/yaml-2.8.3 branch March 26, 2026 13:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code needs:compliance needs:issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant