Skip to content

Bump js-yaml to 4.3.0 - #5199

Merged
Mike Harder (mikeharder) merged 8 commits into
mainfrom
copilot/update-lockfile-js-yaml
Aug 6, 2026
Merged

Bump js-yaml to 4.3.0#5199
Mike Harder (mikeharder) merged 8 commits into
mainfrom
copilot/update-lockfile-js-yaml

Conversation

Copilot AI commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

The lockfile resolved js-yaml 4.1.1 alongside 4.3.0.

Changes

  • Resolve compatible 4.x consumers to js-yaml 4.3.0.
  • Remove obsolete js-yaml 4.1.1 package and snapshot entries.
  • Preserve the unrelated js-yaml 3.x dependency.

Co-authored-by: mikeharder <9459391+mikeharder@users.noreply.github.com>
@mikeharder

Copy link
Copy Markdown
Member

Copilot: wouldn't we need to add a pnpm override for this?

@mikeharder

Copy link
Copy Markdown
Member

Copilot: wouldn't we need to add a pnpm override for this?

Co-authored-by: mikeharder <9459391+mikeharder@users.noreply.github.com>

Copilot AI commented Aug 5, 2026

Copy link
Copy Markdown
Contributor Author

@copilot: wouldn't we need to add a pnpm override for this?

Yes. I added a root js-yaml@^4.0.0: 4.3.0 pnpm override in 8b33390, scoped so the existing 3.x dependency remains unchanged.

@copilot: wouldn't we need to add a pnpm override for this?

Yes. I added a root js-yaml@^4.0.0: 4.3.0 pnpm override in 8b33390, scoped so the existing 3.x dependency remains unchanged.

@mikeharder

Copy link
Copy Markdown
Member

Copilot: make the override resolve to "^4.3.0", but only burn "4.3.0" into the lockfile (not 4.3.1)

Co-authored-by: mikeharder <9459391+mikeharder@users.noreply.github.com>

Copilot AI commented Aug 5, 2026

Copy link
Copy Markdown
Contributor Author

Copilot: make the override resolve to "^4.3.0", but only burn "4.3.0" into the lockfile (not 4.3.1)

Updated in dd0e8c8: the override resolves to ^4.3.0, while the lockfile remains pinned to js-yaml@4.3.0 with no 4.3.1 entry.

@mikeharder
Mike Harder (mikeharder) marked this pull request as ready for review August 5, 2026 23:31
@mikeharder Mike Harder (mikeharder) changed the title Deduplicate js-yaml 4.3.0 in pnpm lockfile Bump js-yaml to ^4.3.0 Aug 5, 2026
@mikeharder Mike Harder (mikeharder) changed the title Bump js-yaml to ^4.3.0 Bump js-yaml to 4.3.0 Aug 5, 2026
@mikeharder
Mike Harder (mikeharder) enabled auto-merge (squash) August 5, 2026 23:32
@azure-pipelines

Copy link
Copy Markdown

You may test this build by running autorest --reset and then either:


Add the following CLI flags
Pacakge Flag Description
@autorest/core --version:https://tinyurl.com/22vxf4ad For changes to autorest core.
@autorest/modelerfour --use:https://tinyurl.com/2adv45mm For changes to modelerfour.

Or with all

autorest --version:https://tinyurl.com/22vxf4ad --use:https://tinyurl.com/2adv45mm

or use the following in your autorest configuration:
# For changes to autorest core
version: "https://tinyurl.com/22vxf4ad"

# For changes to modelerfour
use-extension:
  "@autorest/modelerfour": "https://tinyurl.com/2adv45mm"

If this build is good for you, give this comment a thumbs up. (👍) And you should run `autorest --reset` again once you're finished testing to remove it.

@azure-pipelines

Copy link
Copy Markdown

You may test this build by running autorest --reset and then either:


Add the following CLI flags
Pacakge Flag Description
@autorest/core --version:https://tinyurl.com/22welhxl For changes to autorest core.
@autorest/modelerfour --use:https://tinyurl.com/28qgglos For changes to modelerfour.

Or with all

autorest --version:https://tinyurl.com/22welhxl --use:https://tinyurl.com/28qgglos

or use the following in your autorest configuration:
# For changes to autorest core
version: "https://tinyurl.com/22welhxl"

# For changes to modelerfour
use-extension:
  "@autorest/modelerfour": "https://tinyurl.com/28qgglos"

If this build is good for you, give this comment a thumbs up. (👍) And you should run `autorest --reset` again once you're finished testing to remove it.

@azure-pipelines

Copy link
Copy Markdown

You may test this build by running autorest --reset and then either:


Add the following CLI flags
Pacakge Flag Description
@autorest/core --version:https://tinyurl.com/28hn3hpe For changes to autorest core.
@autorest/modelerfour --use:https://tinyurl.com/26sr9l4c For changes to modelerfour.

Or with all

autorest --version:https://tinyurl.com/28hn3hpe --use:https://tinyurl.com/26sr9l4c

or use the following in your autorest configuration:
# For changes to autorest core
version: "https://tinyurl.com/28hn3hpe"

# For changes to modelerfour
use-extension:
  "@autorest/modelerfour": "https://tinyurl.com/26sr9l4c"

If this build is good for you, give this comment a thumbs up. (👍) And you should run `autorest --reset` again once you're finished testing to remove it.

@mikeharder
Mike Harder (mikeharder) merged commit 86f31a2 into main Aug 6, 2026
10 checks passed
@mikeharder
Mike Harder (mikeharder) deleted the copilot/update-lockfile-js-yaml branch August 6, 2026 18:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants