Skip to content

npm(deps): bump js-yaml from 4.3.0 to 5.2.2 - #93

Merged
guanzhousongmicrosoft merged 2 commits into
mainfrom
dependabot/npm_and_yarn/js-yaml-5.2.2
Jul 30, 2026
Merged

npm(deps): bump js-yaml from 4.3.0 to 5.2.2#93
guanzhousongmicrosoft merged 2 commits into
mainfrom
dependabot/npm_and_yarn/js-yaml-5.2.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 4.3.0 to 5.2.2.

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 30, 2026
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.0 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...5.2.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from 8800a1f to 0987422 Compare July 30, 2026 14:38
@guanzhousongmicrosoft
guanzhousongmicrosoft merged commit 204470b into main Jul 30, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/js-yaml-5.2.2 branch July 30, 2026 14:45
guanzhousongmicrosoft pushed a commit that referenced this pull request Jul 30, 2026
…97)

Dependabot proposed TypeScript 7.0.2 (#95), which cannot build. TS 7 is
the native port, and its compiler API is not the one Next.js links
against, so `next build` fails outright:

  TypeScript 7.0.2 does not provide the compiler API required by Next.js.
  Enable experimental.useTypeScriptCli in your Next.js config to use the
  TypeScript CLI, or install TypeScript 6 instead.

TypeScript 6 is supported, so this takes the upgrade Next.js actually
offers rather than sitting on 5.9.3. A `versions: [7.x]` ignore entry
holds TypeScript at 6 until Next.js supports the native port, so the
same unmergeable PR is not reopened every week. The ignore is scoped to
the 7.x line only, so 6.x updates still flow normally.

Also drops @types/js-yaml, which became redundant when js-yaml 5 landed
in #93. Version 5 ships its own type declarations via its `types` export
condition; the DefinitelyTyped package described the v4 API and is no
longer used by anything.

Generated and verified on GitHub infrastructure rather than locally: the
maintainer's machine sits behind a corporate registry proxy that cannot
reach registry.npmjs.org, so a locally produced lockfile would carry
internal feed URLs unusable by CI and outside contributors. All 706
resolved URLs point at registry.npmjs.org.

Verified with `npm install`, `npm run lint`, and `npm run build:next`,
all passing on TypeScript 6.0.3. Note that upstream CI does not run
lint, so the lint check was run explicitly during generation.


Claude-Session: https://claude.ai/code/session_01WWCBtvyCpxc2aqtyLDhDeE

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants