yamlock 1.1.2

Security

• Require js-yaml 4.3.2 or later within 4.x so empty merge sources count toward the YAML loader's total work limit.
• Limit each YAML merge sequence to 100 source mappings. Regression tests verify the accepted boundary and rejection across encrypt/decrypt/migrate without file writes or source disclosure.

Changed

• Updated the ESLint development dependency to 10.9.1. The Node.js 22+ runtime requirement and encrypted payload formats are unchanged.

Install

npm install yamlock@1.1.2

• npm package
• Changelog

What's Changed

Dependency updates

• chore(deps-dev): bump eslint from 10.9.0 to 10.9.1 in the root-minor-and-patch group by @dependabot[bot] in #4

New Contributors

• @dependabot[bot] made their first contribution in #4

Full Changelog: v1.1.1...v1.1.2