Skip to content

Bump js-yaml from 5.2.2 to 5.2.3 in the all group across 1 directory - #3134

Merged
llastflowers merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-6c28c7b61f
Aug 7, 2026
Merged

Bump js-yaml from 5.2.2 to 5.2.3 in the all group across 1 directory#3134
llastflowers merged 1 commit into
mainfrom
dependabot/npm_and_yarn/all-6c28c7b61f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 1 update in the / directory: js-yaml.

Updates js-yaml from 5.2.2 to 5.2.3

Changelog

Sourced from js-yaml's changelog.

[5.2.3] - 2026-08-01

Fixed

  • Prevent prototype fallback when resolving tags and mapping entries, #782.
  • Resolve !!timestamp years 0000-0099 correctly, #775.
  • Preserve implicit null mapping values before document markers and reject unpaired mapping event streams, #784.
  • Preserve folded scalar values with tab-indented lines when round-tripping a parsed AST through present(); dump() and loading are unaffected, #780.
Commits
  • 6740445 5.2.3 released
  • 94e766d Update changelog
  • c3bd7ca Polish previous commit, #780
  • 00209b6 presenter: treat a tab-indented line in a folded scalar as more-indented (#780)
  • 40fcb4f Fix missing mapping values before document markers and reject unpaired mappin...
  • 49280f3 Fix !!timestamp resolution for years 0000-0099, #775
  • 355dc96 fix: prevent prototype fallback in tag and harden object lookups, #782 (than...
  • d524f83 docs: add contributing guidelines
  • See full diff in compare view

@dependabot
dependabot Bot requested review from a team as code owners August 5, 2026 05:32
@changeset-bot

changeset-bot Bot commented Aug 5, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 5a30d26

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions
github-actions Bot temporarily deployed to Storybook Preview August 5, 2026 05:35 Inactive
Bumps the all group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml).


Updates `js-yaml` from 5.2.2 to 5.2.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.2...5.2.3)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump js-yaml from 5.2.2 to 5.2.3 in the all group Bump js-yaml from 5.2.2 to 5.2.3 in the all group across 1 directory Aug 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/all-6c28c7b61f branch from e672f9c to 5a30d26 Compare August 6, 2026 05:32
@github-actions
github-actions Bot temporarily deployed to Storybook Preview August 6, 2026 05:35 Inactive
@llastflowers
llastflowers merged commit 5e66b1a into main Aug 7, 2026
17 checks passed
@llastflowers
llastflowers deleted the dependabot/npm_and_yarn/all-6c28c7b61f branch August 7, 2026 16:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant