Skip to content

Bump js-yaml, probot and eslint - #13

Open
dependabot[bot] wants to merge 1 commit into
deployment/lambdafrom
dependabot/npm_and_yarn/multi-954d5ec03f
Open

Bump js-yaml, probot and eslint#13
dependabot[bot] wants to merge 1 commit into
deployment/lambdafrom
dependabot/npm_and_yarn/multi-954d5ec03f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown

Removes js-yaml. It's no longer used after updating ancestor dependencies js-yaml, probot and eslint. These dependencies need to be updated together.

Removes js-yaml

Updates probot from 9.3.2 to 14.3.2

Release notes

Sourced from probot's releases.

v14.3.2

14.3.2 (2026-04-03)

Bug Fixes

  • deps: update dependency yaml to v2.8.3 [security] (79b556e)

v14.3.1

14.3.1 (2026-03-20)

Bug Fixes

  • cli: turn off strict args parsing to re-allow using receive command with args (#2304) (67a30d1)

v14.3.0

14.3.0 (2026-03-16)

Bug Fixes

  • receive command failing when LOG_LEVEL is set (#2296) (556ec16)

Features

  • replace dotenv with node native parseEnv, when using deno runtime use deno >2.7.0 (#2265) (c94ac6e)

v14.2.4

14.2.4 (2025-11-14)

Bug Fixes

v14.2.3

14.2.3 (2025-11-13)

Bug Fixes

  • deps: update dependency smee-client to v5 (#2271) (218f292)

v14.2.2

14.2.2 (2025-11-13)

Bug Fixes

... (truncated)

Commits
  • 79b556e fix(deps): update dependency yaml to v2.8.3 [security]
  • 4d184e7 chore(deps): update dependency fastify to v5.8.3 [security]
  • f99b4fc chore(deps): update dependency sonic-boom to v5
  • 67a30d1 fix(cli): turn off strict args parsing to re-allow using receive command with...
  • 1ecfade build(deps-dev): bump undici from 7.22.0 to 7.24.1
  • c94ac6e feat: replace dotenv with node native parseEnv, when using deno runtime use d...
  • a6077ac build(deps): bump minimatch from 9.0.6 to 9.0.9 (#2300)
  • 47b3134 build(deps): lock file maintenance
  • 004a28e chore(deps): update vitest monorepo to v4 (major) (#2259)
  • 9c1a37d build(deps): lock file maintenance (#2282)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for probot since your current version.


Updates eslint from 6.2.0 to 10.8.1

Release notes

Sourced from eslint's releases.

v10.8.1

Bug Fixes

  • 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
  • 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
  • 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
  • 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
  • 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

  • 7d0cbf8 docs: Update README (GitHub Actions Bot)
  • 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
  • 678c90b docs: Update README (GitHub Actions Bot)
  • 8a10424 docs: Update README (GitHub Actions Bot)
  • 69bb948 docs: Update README (GitHub Actions Bot)

Chores

  • 0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])
  • 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)
  • 5611035 test: add error locations info to no-void (#21185) (Lee Daeun)
  • ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])
  • f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)
  • 1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)
  • d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)
  • 65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)
  • 22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)
  • 55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])
  • 7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])
  • eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)
  • 60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)
  • f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)
  • d086293 test: add error locations to no-undef (#21147) (JIYEON)
  • cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)
  • 688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)
  • 7c1e175 test: add error locations to require-await (#21145) (Grit)
  • 588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)
  • 059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)
  • 5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [js-yaml](https://github.com/nodeca/js-yaml). It's no longer used after updating ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml), [probot](https://github.com/probot/probot) and [eslint](https://github.com/eslint/eslint). These dependencies need to be updated together.


Removes `js-yaml`

Updates `probot` from 9.3.2 to 14.3.2
- [Release notes](https://github.com/probot/probot/releases)
- [Commits](probot/probot@v9.3.2...v14.3.2)

Updates `eslint` from 6.2.0 to 10.8.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v6.2.0...v10.8.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version:
  dependency-type: indirect
- dependency-name: probot
  dependency-version: 14.3.2
  dependency-type: direct:production
- dependency-name: eslint
  dependency-version: 10.8.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants