deps: Update js-yaml to ^4.1.0 #172
Loading…
Reference in a new issue
No description provided.
Delete branch "Zearin/deps"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
The latest version of
js-yamluses the “safe” function variants by default now.The migration guide for v3 to v4 is here, if you want to check for any edge cases.
Hey @jonschlinkert, any chance you would be willing to please merge this and deploy a new release?
js-yamlhas a CVE that was only patched in v4 and not v3. https://www.mend.io/vulnerability-database/CVE-2025-64718@jonschlinkert gengle ping after some time, bumping this would be realy nice!
also a new version tag afterwards would also help ... it was quite some time since the last version release ...
@ -35,3 +35,3 @@"define-property": "^2.0.2","js-yaml": "^3.11.0","js-yaml": "^4.1.0","kind-of": "^6.0.2",newer version available ... but i can overwrite that in my project ... i need the code-change for the major bump ...
FYI there's a maintained fork here with this upgrade included: https://github.com/11ty/gray-matter
Already adopted by Eleventy and Docusaurus (see https://github.com/facebook/docusaurus/pull/12181)
View command line instructions
Manual merge helper
Use this merge commit message when completing the merge manually.
Checkout
From your project repository, check out a new branch and test the changes.