Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 6, 2021

This PR contains the following updates:

Package Change Age Confidence
js-yaml 3.14.24.1.1 age confidence
@types/js-yaml (source) 3.12.104.0.9 age confidence

Release Notes

nodeca/js-yaml (js-yaml)

v4.1.1

Compare Source

Security
  • Fix prototype pollution issue in yaml merge (<<) operator.

v4.1.0

Compare Source

Added
  • Types are now exported as yaml.types.XXX.
  • Every type now has options property with original arguments kept as they were
    (see yaml.types.int.options as an example).
Changed
  • Schema.extend() now keeps old type order in case of conflicts
    (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

v4.0.0

Compare Source

Changed
  • Check migration guide to see details for all breaking changes.
  • Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are
    moved to js-yaml-js-types package.
  • Breaking: removed safe* functions. Use load, loadAll, dump
    instead which are all now safe by default.
  • yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use
    yaml.DEFAULT_SCHEMA instead.
  • yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.
  • !!binary now always mapped to Uint8Array on load.
  • Reduced nesting of /lib folder.
  • Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal,
    0o1234 is octal, 1:23 is parsed as string instead of base60).
  • dump() no longer quotes :, [, ], (, ) except when necessary, #​470, #​557.
  • Line and column in exceptions are now formatted as (X:Y) instead of
    at line X, column Y (also present in compact format), #​332.
  • Code snippet created in exceptions now contains multiple lines with line numbers.
  • dump() now serializes undefined as null in collections and removes keys with
    undefined in mappings, #​571.
  • dump() with skipInvalid=true now serializes invalid items in collections as null.
  • Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #​576.
  • Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #​258.
Added
  • Added .mjs (es modules) support.
  • Added quotingType and forceQuotes options for dumper to configure
    string literal style, #​290, #​529.
  • Added styles: { '!!null': 'empty' } option for dumper
    (serializes { foo: null } as "foo: "), #​570.
  • Added replacer option (similar to option in JSON.stringify), #​339.
  • Custom Tag can now handle all tags or multiple tags with the same prefix, #​385.
Fixed
  • Astral characters are no longer encoded by dump(), #​587.
  • "duplicate mapping key" exception now points at the correct column, #​452.
  • Extra commas in flow collections (e.g. [foo,,bar]) now throw an exception
    instead of producing null, #​321.
  • __proto__ key no longer overrides object prototype, #​164.
  • Removed bower.json.
  • Tags are now url-decoded in load() and url-encoded in dump()
    (previously usage of custom non-ascii tags may have led to invalid YAML that can't be parsed).
  • Anchors now work correctly with empty nodes, #​301.
  • Fix incorrect parsing of invalid block mapping syntax, #​418.
  • Throw an error if block sequence/mapping indent contains a tab, #​80.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 11 times, most recently from ce5862b to a806261 Compare January 30, 2021 12:00
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 7 times, most recently from f0a991d to 4d331e8 Compare February 10, 2021 22:08
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 4 times, most recently from 9f105d0 to 5b00e9c Compare February 19, 2021 22:21
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 4 times, most recently from a4fd1fc to 38b556c Compare March 1, 2021 01:10
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 4 times, most recently from 72279ac to 59632c7 Compare March 8, 2021 01:57
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 2 times, most recently from ada4826 to 1cf3a86 Compare November 19, 2021 19:41
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 2 times, most recently from 9229eea to 084150e Compare June 24, 2022 05:33
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch from 084150e to c8a32df Compare July 5, 2022 18:53
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch from c8a32df to 01743fa Compare November 20, 2022 18:14
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 6 times, most recently from d07a3b0 to aac992a Compare March 25, 2023 04:34
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch from aac992a to 82e51b0 Compare September 4, 2023 19:55
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch from 82e51b0 to 223d54b Compare September 15, 2023 21:15
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 3 times, most recently from fdef32f to 263f16f Compare October 17, 2023 22:18
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 3 times, most recently from 00c6465 to 8b6f37d Compare October 23, 2023 19:59
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch from 8b6f37d to 041c37c Compare November 7, 2023 23:37
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch 2 times, most recently from 6c686c9 to 2209790 Compare February 1, 2024 01:57
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch from 2209790 to eaaca15 Compare August 11, 2025 21:04
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch from eaaca15 to 6d8f191 Compare November 12, 2025 21:00
@renovate renovate bot changed the title fix(deps): update dependency js-yaml to v4 chore(deps): update dependency @types/js-yaml to v4 Nov 14, 2025
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch from 6d8f191 to 1d87008 Compare November 14, 2025 15:55
@renovate renovate bot force-pushed the renovate/js-yaml-4.x branch from 1d87008 to c75d38a Compare November 18, 2025 07:12
@renovate renovate bot changed the title chore(deps): update dependency @types/js-yaml to v4 fix(deps): update dependency js-yaml to v4 Nov 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant