From f25d91f29212a9c775e5d40ee0088487a2ad8fa0 Mon Sep 17 00:00:00 2001
From: Anna Henningsen <anna@addaleax.net>
Date: Thu, 27 Nov 2025 12:09:59 +0100
Subject: [PATCH] chore(deps): bump js-yaml version used by cli-repl

This was done through manual package-lock surgery since, for some
inexplicable reason, npm decided to have a separate js-yaml dependency
under cli-repl even though the hoisted one at the top level (4.1.1)
would have matched cli-repl's requirements.
---
 package-lock.json              | 22 +---------------------
 packages/cli-repl/package.json |  2 +-
 2 files changed, 2 insertions(+), 22 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c46fe2920..80c89e67c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23164,7 +23164,6 @@
       "version": "4.1.1",
       "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
       "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
-      "devOptional": true,
       "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
@@ -23177,7 +23176,6 @@
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
       "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
-      "devOptional": true,
       "license": "Python-2.0"
     },
     "node_modules/jsbn": {
@@ -37711,7 +37709,7 @@
         "bson": "^6.10.4",
         "escape-string-regexp": "^4.0.0",
         "is-recoverable-error": "^1.0.3",
-        "js-yaml": "^4.1.0",
+        "js-yaml": "^4.1.1",
         "mongodb-connection-string-url": "^3.0.2",
         "mongodb-log-writer": "^2.4.3",
         "mongodb-redact": "^1.3.0",
@@ -37766,12 +37764,6 @@
         "@types/chai": "*"
       }
     },
-    "packages/cli-repl/node_modules/argparse": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
-      "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
-      "license": "Python-2.0"
-    },
     "packages/cli-repl/node_modules/chai-as-promised": {
       "version": "8.0.2",
       "resolved": "https://registry.npmjs.org/chai-as-promised/-/chai-as-promised-8.0.2.tgz",
@@ -37795,18 +37787,6 @@
         "node": ">= 16"
       }
     },
-    "packages/cli-repl/node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
-      "license": "MIT",
-      "dependencies": {
-        "argparse": "^2.0.1"
-      },
-      "bin": {
-        "js-yaml": "bin/js-yaml.js"
-      }
-    },
     "packages/connectivity-tests": {
       "name": "@mongosh/connectivity-tests",
       "version": "2.5.3",
diff --git a/packages/cli-repl/package.json b/packages/cli-repl/package.json
index 71ab39e8b..0399d00e7 100644
--- a/packages/cli-repl/package.json
+++ b/packages/cli-repl/package.json
@@ -84,7 +84,7 @@
     "bson": "^6.10.4",
     "escape-string-regexp": "^4.0.0",
     "is-recoverable-error": "^1.0.3",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.1.1",
     "mongodb-connection-string-url": "^3.0.2",
     "mongodb-log-writer": "^2.4.3",
     "mongodb-redact": "^1.3.0",