Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 15, 2021

Bumps js-yaml from 3.14.1 to 4.1.0.

Changelog

Sourced from js-yaml's changelog.

[4.1.0] - 2021-04-15

Added

  • Types are now exported as yaml.types.XXX.
  • Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

  • Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

[4.0.0] - 2021-01-03

Changed

  • Check migration guide to see details for all breaking changes.
  • Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are moved to js-yaml-js-types package.
  • Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.
  • yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use yaml.DEFAULT_SCHEMA instead.
  • yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.
  • !!binary now always mapped to Uint8Array on load.
  • Reduced nesting of /lib folder.
  • Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal, 0o1234 is octal, 1:23 is parsed as string instead of base60).
  • dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.
  • Line and column in exceptions are now formatted as (X:Y) instead of at line X, column Y (also present in compact format), #332.
  • Code snippet created in exceptions now contains multiple lines with line numbers.
  • dump() now serializes undefined as null in collections and removes keys with undefined in mappings, #571.
  • dump() with skipInvalid=true now serializes invalid items in collections as null.
  • Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.
  • Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.

Added

  • Added .mjs (es modules) support.
  • Added quotingType and forceQuotes options for dumper to configure string literal style, #290, #529.
  • Added styles: { '!!null': 'empty' } option for dumper (serializes { foo: null } as "foo: "), #570.
  • Added replacer option (similar to option in JSON.stringify), #339.
  • Custom Tag can now handle all tags or multiple tags with the same prefix, #385.

Fixed

  • Astral characters are no longer encoded by dump(), #587.
  • "duplicate mapping key" exception now points at the correct column, #452.
  • Extra commas in flow collections (e.g. [foo,,bar]) now throw an exception instead of producing null, #321.
  • __proto__ key no longer overrides object prototype, #164.

... (truncated)

Commits
  • 2cef47b 4.1.0 released
  • 810b149 dist rebuild
  • 2b5620e Export built-in types, type override now preserves order
  • ab31bba doc: clarify lineWidth dump options (#612)
  • ee74ce4 4.0.0 released
  • a44bb7c dist rebuild
  • aee620a Throw an error if block sequence/mapping indent contains a tab
  • f0f205b Fix parsing of invalid block mappings
  • e8cf6f6 Fix error with anchor not being assigned to an empty node
  • a583097 Shorthand tags with !! whenever possible
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 15, 2021
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.1.0 branch 4 times, most recently from f7b298c to 1e268d8 Compare April 21, 2021 06:40
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.1.0 branch 9 times, most recently from 71b378f to 3b416bd Compare April 29, 2021 07:14
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.1.0 branch 5 times, most recently from 77e7777 to e97c5ad Compare May 4, 2021 07:25
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.1.0 branch 10 times, most recently from 5b260e9 to 437c95a Compare May 13, 2021 07:15
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.1.0 branch 10 times, most recently from 2e40a0b to 0e7ae47 Compare July 29, 2021 23:07
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.1.0 branch 11 times, most recently from 42e87c6 to b0b373b Compare August 4, 2021 23:17
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.1.0 branch from b0b373b to f1abd77 Compare August 6, 2021 23:07
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 4.1.0.
- [Release notes](https://github.com/nodeca/js-yaml/releases)
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...4.1.0)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.1.0 branch from f1abd77 to bcb98a2 Compare August 6, 2021 23:14
@char0n char0n closed this in 3937607 Aug 9, 2021
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 9, 2021

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/js-yaml-4.1.0 branch August 9, 2021 13:41
swagger-bot pushed a commit that referenced this pull request Aug 9, 2021
# [3.15.0](v3.14.1...v3.15.0) (2021-08-09)

### Features

* **deps:** bump js-yaml from 3.14.1 to 4.1.0 ([3937607](3937607)), closes [#2026](#2026) [#1970](#1970)
@swagger-bot
Copy link
Contributor

🎉 This issue has been resolved in version 3.15.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file released

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants