From 8267a7d3bcf926e50b55396a153fcb313f532ad3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 16 Jun 2026 03:04:44 +0000
Subject: [PATCH] Bump js-yaml from 4.1.0 to 4.2.0

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json | 2 +-
 yarn.lock    | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 3cc80800666..8b45121f840 100644
--- a/package.json
+++ b/package.json
@@ -104,7 +104,7 @@
     "image-size": "1.0.0",
     "intl": "1.2.5",
     "intl-messageformat": "5.4.3",
-    "js-yaml": "4.1.0",
+    "js-yaml": "4.2.0",
     "jsonpath": "1.1.1",
     "jsonwebtoken": "8.5.1",
     "juice": "8.0.0",
diff --git a/yarn.lock b/yarn.lock
index 87cf5616e30..41ef5f16142 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5526,6 +5526,13 @@ js-yaml@4.1.0:
   dependencies:
     argparse "^2.0.1"
 
+js-yaml@4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.2.0.tgz#2bd9e85682dd91bd469afb809d816043b3d49524"
+  integrity sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==
+  dependencies:
+    argparse "^2.0.1"
+
 js-yaml@^3.13.1, js-yaml@~3.14.0:
   version "3.14.1"
   resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.14.1.tgz#dae812fdb3825fa306609a8717383c50c36a0537"