From ada6f8b23457c8158abb74d88276822dbc37ef52 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Jul 2026 21:38:26 +0000
Subject: [PATCH] Bump js-yaml from 4.1.1 to 4.3.0 in /cluster/pulumi

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 cluster/pulumi/common/package.json |  2 +-
 cluster/pulumi/gha/package.json    |  2 +-
 cluster/pulumi/package-lock.json   | 20 +++++++++++++++-----
 3 files changed, 17 insertions(+), 7 deletions(-)

diff --git a/cluster/pulumi/common/package.json b/cluster/pulumi/common/package.json
index e86c2325d8..1c5187c79f 100644
--- a/cluster/pulumi/common/package.json
+++ b/cluster/pulumi/common/package.json
@@ -15,7 +15,7 @@
     "@pulumi/github": "6.13.1",
     "@types/auth0": "^3.3.11",
     "auth0": "^5.6.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.0",
     "lodash": "^4.18.1",
     "node-fetch": "^2.7.0",
     "ts-node": "^10.9.2",
diff --git a/cluster/pulumi/gha/package.json b/cluster/pulumi/gha/package.json
index 19a66ba5d1..82fcf8f418 100644
--- a/cluster/pulumi/gha/package.json
+++ b/cluster/pulumi/gha/package.json
@@ -4,7 +4,7 @@
   "main": "src/index.ts",
   "dependencies": {
     "@canton-network/splice-pulumi-common": "1.0.0",
-    "js-yaml": "^4.1.0"
+    "js-yaml": "^4.3.0"
   },
   "scripts": {
     "fix": "npm run format:fix && npm run lint:fix",
diff --git a/cluster/pulumi/package-lock.json b/cluster/pulumi/package-lock.json
index a79a914f8a..718144b0b4 100644
--- a/cluster/pulumi/package-lock.json
+++ b/cluster/pulumi/package-lock.json
@@ -98,7 +98,7 @@
                 "@pulumi/std": "2.3.2",
                 "@types/auth0": "^3.3.11",
                 "auth0": "^5.6.0",
-                "js-yaml": "^4.1.0",
+                "js-yaml": "^4.3.0",
                 "lodash": "^4.18.1",
                 "node-fetch": "^2.7.0",
                 "ts-node": "^10.9.2",
@@ -151,7 +151,7 @@
             "version": "1.0.0",
             "dependencies": {
                 "@canton-network/splice-pulumi-common": "1.0.0",
-                "js-yaml": "^4.1.0"
+                "js-yaml": "^4.3.0"
             },
             "devDependencies": {
                 "@types/js-yaml": "^4.0.5"
@@ -8803,9 +8803,19 @@
             "license": "MIT"
         },
         "node_modules/js-yaml": {
-            "version": "4.1.1",
-            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
-            "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+            "version": "4.3.0",
+            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
+            "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+            "funding": [
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/puzrin"
+                },
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/nodeca"
+                }
+            ],
             "license": "MIT",
             "dependencies": {
                 "argparse": "^2.0.1"