Skip to content

build(deps): bump js-yaml from 5.2.1 to 5.2.2 - #841

Merged
pyrooka merged 2 commits into
mainfrom
dependabot/npm_and_yarn/js-yaml-5.2.2
Aug 3, 2026
Merged

build(deps): bump js-yaml from 5.2.1 to 5.2.2#841
pyrooka merged 2 commits into
mainfrom
dependabot/npm_and_yarn/js-yaml-5.2.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 5.2.1 to 5.2.2.

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.
Commits
  • 3c29559 5.2.2 released
  • 3e5240f parser: avoid reparsing flow sequence pair keys
  • bd7ebb2 fix: quote flow scalars where a colon precedes a flow indicator (#773)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.1 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.1...5.2.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.2.2 branch from 2567641 to dc97672 Compare July 27, 2026 07:58

@pyrooka pyrooka left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@pyrooka
pyrooka merged commit dfa879d into main Aug 3, 2026
9 checks passed
@pyrooka
pyrooka deleted the dependabot/npm_and_yarn/js-yaml-5.2.2 branch August 3, 2026 08:47
ibm-devx-sdk pushed a commit that referenced this pull request Aug 3, 2026
## ibm-openapi-validator [1.38.2](https://github.com/IBM/openapi-validator/compare/ibm-openapi-validator@1.38.1...ibm-openapi-validator@1.38.2) (2026-08-03)

### Bug Fixes

* **deps:** bump js-yaml from 5.2.1 to 5.2.2 ([#841](#841)) ([dfa879d](dfa879d))
@ibm-devx-sdk

Copy link
Copy Markdown

🎉 This PR is included in version 1.38.2 🎉

The release is available on npm package (@latest dist-tag)

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code released

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants