deps: Update js-yaml to ^4.1.0 #172

Open
Zearin wants to merge 1 commit from Zearin/deps into master
Zearin commented 2024-04-13 14:41:53 +00:00 (Migrated from github.com)

The latest version of js-yaml uses the “safe” function variants by default now.

The migration guide for v3 to v4 is here, if you want to check for any edge cases.

The latest version of `js-yaml` uses the “safe” function variants by default now. The [migration guide for v3 to v4 is here](https://github.com/nodeca/js-yaml/blob/master/migrate_v3_to_v4.md), if you want to check for any edge cases.
Eric-Arellano commented 2025-11-14 18:46:58 +00:00 (Migrated from github.com)

Hey @jonschlinkert, any chance you would be willing to please merge this and deploy a new release? js-yaml has a CVE that was only patched in v4 and not v3. https://www.mend.io/vulnerability-database/CVE-2025-64718

Hey @jonschlinkert, any chance you would be willing to please merge this and deploy a new release? `js-yaml` has a CVE that was only patched in v4 and not v3. https://www.mend.io/vulnerability-database/CVE-2025-64718
6543 commented 2026-06-19 10:36:31 +00:00 (Migrated from github.com)

@jonschlinkert gengle ping after some time, bumping this would be realy nice!

also a new version tag afterwards would also help ... it was quite some time since the last version release ...

@jonschlinkert gengle ping after some time, bumping this would be realy nice! also a new version tag afterwards would also help ... it was quite some time since the last version release ...
6543 (Migrated from github.com) reviewed 2026-06-19 10:39:25 +00:00
@ -35,3 +35,3 @@
"define-property": "^2.0.2",
"js-yaml": "^3.11.0",
"js-yaml": "^4.1.0",
"kind-of": "^6.0.2",
6543 (Migrated from github.com) commented 2026-06-19 10:39:25 +00:00

newer version available ... but i can overwrite that in my project ... i need the code-change for the major bump ...

newer version available ... but i can overwrite that in my project ... i need the code-change for the major bump ...
slorber commented 2026-06-19 13:11:45 +00:00 (Migrated from github.com)

FYI there's a maintained fork here with this upgrade included: https://github.com/11ty/gray-matter

Already adopted by Eleventy and Docusaurus (see https://github.com/facebook/docusaurus/pull/12181)

FYI there's a maintained fork here with this upgrade included: https://github.com/11ty/gray-matter Already adopted by Eleventy and Docusaurus (see https://github.com/facebook/docusaurus/pull/12181)
This pull request has changes conflicting with the target branch.
  • lib/engines.js
  • package.json
  • test/parse-custom.js
  • test/parse-yaml.js
View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin Zearin/deps:Zearin/deps
git switch Zearin/deps
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
rtlabs-llm-agents/gms-gray-matter!172
No description provided.