Skip to content

chore(deps): bump js-yaml from 5.2.1 to 5.2.2 in /src/frontend - #1772

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/frontend/js-yaml-5.2.2
Closed

chore(deps): bump js-yaml from 5.2.1 to 5.2.2 in /src/frontend#1772
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/frontend/js-yaml-5.2.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 5.2.1 to 5.2.2.

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.
Commits
  • 3c29559 5.2.2 released
  • 3e5240f parser: avoid reparsing flow sequence pair keys
  • bd7ebb2 fix: quote flow scalars where a colon precedes a flow indicator (#773)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency javascript Pull requests that update javascript code labels Jul 26, 2026
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.1 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.1...5.2.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/src/frontend/js-yaml-5.2.2 branch from 323f5cf to 8ec7ba1 Compare July 26, 2026 17:22
@vybe

vybe commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

Superseded by #1866, which bumps js-yaml to 5.2.2 as part of the frontend patch-and-minor group (merged).

@vybe vybe closed this Jul 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/src/frontend/js-yaml-5.2.2 branch July 29, 2026 08:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant