-
-
Notifications
You must be signed in to change notification settings - Fork 74
chore: update js-yaml to v3.14.2
#874
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
✅ Deploy Preview for hi-eslint ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for es-eslint ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for ja-eslint ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for zh-hans-eslint ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for fr-eslint ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for pt-br-eslint ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for de-eslint ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
✅ Deploy Preview for new-eslint ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR updates the js-yaml dependency from version 3.14.1 to 3.14.2 to address security vulnerabilities. The update uses v3.14.2, which includes a backported bug fix that resolves the security issue without requiring an upgrade to v4.
Key Changes:
- Updated
js-yamldependency version to^3.14.2in both package.json and package-lock.json - Updated package-lock.json with new integrity hash and added license field
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| package.json | Updated js-yaml dependency version from ^3.14.1 to ^3.14.2 |
| package-lock.json | Updated locked version, resolved URL, integrity hash for js-yaml, and added license field |
The changes are straightforward and consistent across both files. The version bump is a patch-level update that should not introduce breaking changes, making it a safe security update.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
amareshsm
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 👍
Prerequisites checklist
What is the purpose of this pull request?
This PR was motivated by #843.
In this PR, I've updated
js-yamltov3.14.2to address security vulnerabilities in[email protected].v3.14.2 includes a backported bug fix that resolves the security issue without requiring an upgrade to v4.
Ref: https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md#3142---2025-11-15
What changes did you make? (Give an overview)
In this PR, I've updated
js-yamltov3.14.2to address security vulnerabilities in[email protected].Related Issues
Ref: #843
Is there anything you'd like reviewers to focus on?
N/A