Skip to content

chore: bump js-yaml from 3.15.1 to 3.15.2 - #614

Merged
PolinaGurinovich97 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.2
Sep 11, 2026
Merged

PolinaGurinovich97 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 3.15.1 to 3.15.2.

Changelog

Sourced from js-yaml's changelog.

3.15.2 - 2026-08-26

Changed

  • [backport] Hard-limit merge sequence size to 100.

Security

  • [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.
Commits

@dependabot dependabot Bot added dependencies Dependencies update javascript Pull requests that update Javascript code labels Sep 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.15.2 branch from 62965af to 352f547 Compare September 11, 2026 17:59
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.15.1 to 3.15.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.15.1...3.15.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.15.2 branch from 352f547 to 0e605f8 Compare September 11, 2026 18:08
@PolinaGurinovich97
PolinaGurinovich97 enabled auto-merge (squash) September 11, 2026 18:10
@PolinaGurinovich97
PolinaGurinovich97 merged commit 80c4426 into main Sep 11, 2026
8 checks passed
@PolinaGurinovich97
PolinaGurinovich97 deleted the dependabot/npm_and_yarn/js-yaml-3.15.2 branch September 11, 2026 18:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependencies update javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant