Skip to content

chore(deps): bump js-yaml from 3.15.0 to 3.15.2 - #2184

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.2
Open

chore(deps): bump js-yaml from 3.15.0 to 3.15.2#2184
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 3.15.0 to 3.15.2.

Changelog

Sourced from js-yaml's changelog.

3.15.2 - 2026-08-26

Changed

  • [backport] Hard-limit merge sequence size to 100.

Security

  • [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

3.15.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 9, 2026
@dependabot
dependabot Bot temporarily deployed to test-trigger-is September 9, 2026 16:22 Inactive
@rugpanov

rugpanov commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

🤖 Integration tests ❌ failed for ebc378a3.
View run

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.15.2 branch from ebc378a to fdb049d Compare September 10, 2026 09:33
@dependabot
dependabot Bot temporarily deployed to test-trigger-is September 10, 2026 09:33 Inactive
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.15.0 to 3.15.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.15.0...3.15.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.15.2 branch from fdb049d to 6679173 Compare September 10, 2026 18:33
@dependabot
dependabot Bot temporarily deployed to test-trigger-is September 10, 2026 18:33 Inactive
@github-actions

Copy link
Copy Markdown
Contributor

If integration tests don't run automatically, an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/vscode

Inputs:

  • PR number: 2184
  • Commit SHA: 6679173a1ed80f4c30b7fa93f54150e981fe0e41

Checks will be approved automatically on success.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant