Skip to content

chore(deps): remove unused js-yaml devDependency#3489

Merged
jamiehenson merged 4 commits into
mainfrom
dependabot/npm_and_yarn/js-yaml-4.3.0
Jul 23, 2026
Merged

chore(deps): remove unused js-yaml devDependency#3489
jamiehenson merged 4 commits into
mainfrom
dependabot/npm_and_yarn/js-yaml-4.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Supersedes the js-yaml 4.2.0 -> 4.3.0 bump. The root js-yaml devDependency has no first-party call site anywhere in the repo (verified by grep across the tree for imports/yaml.load/yaml.dump/scripts), so this removes the unused direct devDependency instead of bumping it.

  • js-yaml remains resolved transitively (via eslint) at 4.2.0 in yarn.lock; nothing that actually parses YAML is affected.
  • The lockfile also de-duplicates a few identical-resolution aliased blocks (react-is, string-width, strip-ansi, wrap-ansi) as a side effect of regeneration — no version changes.
  • Branch merged up to current main (webpack 5.108.4, vite 6), so this is a clean, up-to-date diff.

~ 𝒞𝓁𝒶𝓊𝒹𝑒

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.3.0 branch 6 times, most recently from 30bc5c4 to e2443b1 Compare July 23, 2026 14:49
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 4.3.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.2.0...4.3.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.3.0 branch from e2443b1 to 3557519 Compare July 23, 2026 15:04
js-yaml had no first-party call site in the repo, so drop the direct
devDependency rather than bumping it. It stays resolved transitively
(via eslint) at 4.2.0.
@jamiehenson jamiehenson changed the title build(deps): bump js-yaml from 4.2.0 to 4.3.0 chore(deps): remove unused js-yaml devDependency Jul 23, 2026
@jamiehenson
jamiehenson enabled auto-merge July 23, 2026 15:20
@jamiehenson
jamiehenson merged commit f6db30a into main Jul 23, 2026
7 checks passed
@jamiehenson
jamiehenson deleted the dependabot/npm_and_yarn/js-yaml-4.3.0 branch July 23, 2026 15:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Development

Successfully merging this pull request may close these issues.

1 participant