Bump js-yaml, @angular-devkit/build-angular, electron-builder and eslint in /v1 by dependabot[bot] · Pull Request #183 · eosrio/simpleos

dependabot · 2026-07-26T00:53:46Z

Bumps js-yaml to 4.3.0 and updates ancestor dependencies js-yaml, @angular-devkit/build-angular, electron-builder and eslint. These dependencies need to be updated together.

Updates js-yaml from 3.13.1 to 4.3.0

Changelog

Sourced from js-yaml's changelog.

4.3.0, 3.15.0 - 2026-06-27

Security

Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.

Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

[breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

Added named exports for schemas, tags, parser events and AST utilities.

Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.

Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.

Added dump() transform option for changing the generated AST before rendering.

Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.

Added formal data layers (events and AST) for modular data pipelines.

Added low-level parser (to events), presenter and visitor APIs.

Added the YAML Test Suite to the test set.

Changed

See the migration guide for upgrade notes.

Rewritten in TypeScript and reorganized the public API around flat named exports.

... (truncated)

Commits

33d05b5 4.3.0 released
663bfab Drop demo publish, to not override new v5 one.
1cb8c7b Add v4-legacy tag for publish
02f27af Restore umd builds back to es5
8be84ed Fix es5 compatibility
59423c6 Replace maxMergeSeqLength option with maxTotalMergeKeys (more robust). Ba...
6842ef6 doc polish
590dbab 4.2.0 released
f944dc5 Add package.json funding field
f692719 Changelog update
Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 0.901.6 to 21.2.19

Release notes

Sourced from @angular-devkit/build-angular's releases.

21.2.19

@angular-devkit/build-angular

Commit Description

update http-proxy-middleware to 3.0.7

21.2.18

@angular/cli

Commit Description

respect release age policy in update bootstrapping logic

@angular/build

Commit Description

bump undici to 7.28.0

bump vite to 7.3.6

21.2.17

@angular/build

Commit Description

bump @babel/core to 7.29.7

bump esbuild to 0.28.1

bump piscina to 5.2.0

bump vite to 7.3.5

21.2.16

@angular/cli

Commit Description

update pacote to 21.5.1

@angular/ssr

Commit Description

prioritize options over environment variables in AngularNodeAppEngine

21.2.15

@angular/cli

Commit Description

remove forceAuth and unscoped credential parsing

support registry metadata fetching under bun package manager

21.2.14

@angular/cli

Commit Description

expand package groups for newly added peer dependencies in update schematic

@angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

21.2.19 (2026-07-09)

@angular-devkit/build-angular

Commit Type Description

df5429871 fix update http-proxy-middleware to 3.0.7

20.3.32 (2026-07-09)

@angular-devkit/build-angular

Commit Type Description

d4e07cb3e fix update http-proxy-middleware to 3.0.7

22.1.0-next.3 (2026-07-09)

@angular/build

Commit Type Description

34d558c3c feat add built-in SQLite cache store fallback

52ae7f862 feat share persistent build cache across git worktrees

41bd100dd fix fallback to build target preserveSymlinks option in karma runner

6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds

85c53d990 fix prevent externalizing builder-injected i18n locale data

004cc4104 fix strip all vite id prefixes from minified code with external dependencies

09d0a11a8 perf enable fast-path AST printing with sourcemaps in AotCompilation

@angular/ssr

Commit Type Description

0bd22dae0 fix replace all route parameters when resolving relative redirects

22.0.6 (2026-07-08)

... (truncated)

Commits

See full diff in compare view

Updates electron-builder from 22.6.1 to 26.15.3

Release notes

Sourced from electron-builder's releases.

electron-builder@26.15.3

What's Changed

fix: add ELECTRON_BUILDER_BINARIES_ALLOW_HTTP opt-in for parsing env vars targeting non-localhost HTTP by @mmaietta in electron-userland/electron-builder#9856

docs: update docs and add build lifecycle page by @mmaietta in electron-userland/electron-builder#9857

chore(test): update vitest by @mmaietta in electron-userland/electron-builder#9859

fix(download): persist toolset archives in a predictable cache path by @mmaietta in electron-userland/electron-builder#9861

fix(publish): set x-amz-content-sha256: UNSIGNED-PAYLOAD before SigV4 signing by @mmaietta in electron-userland/electron-builder#9863

chore(deploy): Release (next) by @electron-builder-release-bot[bot] in electron-userland/electron-builder#9858

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.2...electron-builder@26.15.3

electron-builder@26.15.2

What's Changed

fix(mac): use native zip for macOS zip target to preserve .framework symlinks by @mmaietta in electron-userland/electron-builder#9847

fix: retry package install on transient network errors by @mmaietta in electron-userland/electron-builder#9850

fix(icons): replace png2icons with wasm-vips Lanczos3 resampling for high-quality icon conversion by @mmaietta in electron-userland/electron-builder#9851

chore(deploy): Release (next) by @electron-builder-release-bot[bot] in electron-userland/electron-builder#9848

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.1...electron-builder@26.15.2

electron-builder@26.15.1

What's Changed

fix: validate packages by @regnete in electron-userland/electron-builder#9838

chore: ci:validate, ci:test:fetch-cache simplification, and code cleanup by @mmaietta in electron-userland/electron-builder#9840

chore(tests): embed platform markers in generated test filenames to eliminate "unknown" timing in shard plan by @mmaietta in electron-userland/electron-builder#9843

chore(deps): update and unpin @electron/rebuild package by @mmaietta in electron-userland/electron-builder#9845

chore(deploy): Release (next) by @electron-builder-release-bot[bot] in electron-userland/electron-builder#9842

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.0...electron-builder@26.15.1

electron-builder@26.15.0

What's Changed

chore(pr-labeler): force run to only pull_request on core repo (ignore forks) by @mmaietta in electron-userland/electron-builder#9821

fix(mac): skip signing when no certificate found; warn on ad-hoc + hardenedRuntime by @mmaietta in electron-userland/electron-builder#9822

fix: use bash instead of sh in package.json by @mmaietta in electron-userland/electron-builder#9823

chore: replace app-builder-bin node-dep-tree and rebuild-node-modules by @mmaietta in electron-userland/electron-builder#9828

feat(node-module-collector): invoke package managers via PowerShell -EncodedCommand on Windows by @mmaietta in electron-userland/electron-builder#9827

feat(migration): fully replace Go binary app-builder-bin with TS implementation by @mmaietta in electron-userland/electron-builder#9829

chore(test): print out shard duration calculation results during shard-count step by @mmaietta in electron-userland/electron-builder#9831

feat(linux): add syncDesktopName option to align installed .desktop filename with StartupWMClass by @mmaietta in electron-userland/electron-builder#9832

fix(smart-cache): deep-merge shard caches so linux timing data survives across runs by @mmaietta in electron-userland/electron-builder#9833

fix: holistic field detection for <text> (sha256 hash) redaction by @mmaietta in electron-userland/electron-builder#9834

fix(mac/pkg): explicitly pass --version to pkgbuild by @mmaietta in electron-userland/electron-builder#9835

chore(deploy): Release (next) by @electron-builder-release-bot[bot] in electron-userland/electron-builder#9825

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.14.0...electron-builder@26.15.0

... (truncated)

Changelog

Sourced from electron-builder's changelog.

26.15.3

Patch Changes

35bfdeb 9097daf

builder-util@26.15.3

app-builder-lib@26.15.3

dmg-builder@26.15.3

26.15.2

Patch Changes

e25f967 f5ae163 3951024

app-builder-lib@26.15.2

dmg-builder@26.15.2

26.15.1

Patch Changes

588ff48 db5d2f4

app-builder-lib@26.15.1

dmg-builder@26.15.1

... (truncated)

Commits

512a57e chore(deploy): Release v26.15.3 (#9858)
a6117b3 chore(deploy): Release v26.15.2 (#9848)
d57f094 chore(deploy): Release v26.15.1 (#9842)
bed3a9c chore(deploy): Release v26.15.0 (electron-updater@6.8.9) (#9825)
198c10c chore: replace app-builder-bin node-dep-tree and rebuild-node-modules (#9...
e236392 chore(deploy): Release v26.14.0 (#9812)
72d298c chore(deploy): Release v26.13.1 (#9805)
ffd11c7 chore(deploy): Release v26.13.0 (electron-updater@6.8.8) (#9793)
2c8c71a chore(deploy): Release v26.12.1 (electron-updater@6.8.7) (#9782)
d6a5aee fix: harden generated-file output, argument construction, and download valida...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for electron-builder since your current version.

Updates eslint from 7.0.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)

9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)

e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)

20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)

8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)

b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)

784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)

7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))

92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)

68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)

d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)

eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)

c5963f7 docs: Update README (GitHub Actions Bot)

Chores

4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)

2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)

eccbe7b test: add error locations to no-class-assign (#21123) (devoil)

e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])

e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])

ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)

044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)

fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)

5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)

9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)

a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)

8dde645 test: add error locations to no-ex-assign (#21102) (devoil)

13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)

a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)

c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)

0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)

3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)

dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)

2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))

5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])

d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)

bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)

f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

749dfed 10.8.0
4bd0d75 Build: changelog update for 10.8.0
4fbf46d test: pin webpack version to 5.108.4 (#21137)
6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
784dfbe docs: Clarify no-eq-null description (#21120)
6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
eccbe7b test: add error locations to no-class-assign (#21123)
2fee9bb feat: export ConfigObject from eslint/config (#21082)
e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.3.0 and updates ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml), [@angular-devkit/build-angular](https://github.com/angular/angular-cli), [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder) and [eslint](https://github.com/eslint/eslint). These dependencies need to be updated together. Updates `js-yaml` from 3.13.1 to 4.3.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.13.1...4.3.0) Updates `@angular-devkit/build-angular` from 0.901.6 to 21.2.19 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular-cli/commits/v21.2.19) Updates `electron-builder` from 22.6.1 to 26.15.3 - [Release notes](https://github.com/electron-userland/electron-builder/releases) - [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-builder/CHANGELOG.md) - [Commits](https://github.com/electron-userland/electron-builder/commits/electron-builder@26.15.3/packages/electron-builder) Updates `eslint` from 7.0.0 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v7.0.0...v10.8.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.3.0 dependency-type: indirect - dependency-name: "@angular-devkit/build-angular" dependency-version: 21.2.19 dependency-type: direct:development - dependency-name: electron-builder dependency-version: 26.15.3 dependency-type: direct:development - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026

dependabot Bot mentioned this pull request Jul 26, 2026

Bump js-yaml, @angular-devkit/build-angular, electron-builder and eslint in /v1 #175

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump js-yaml, @angular-devkit/build-angular, electron-builder and eslint in /v1 - #183

Bump js-yaml, @angular-devkit/build-angular, electron-builder and eslint in /v1#183
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/v1/multi-f8f465a70d

dependabot Bot commented on behalf of github Jul 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	bump `@babel/core` to 7.29.7
	bump esbuild to 0.28.1
	bump piscina to 5.2.0
	bump vite to 7.3.5

Commit	Description
	remove forceAuth and unscoped credential parsing
	support registry metadata fetching under bun package manager

Commit	Type	Description
34d558c3c	feat	add built-in SQLite cache store fallback
52ae7f862	feat	share persistent build cache across git worktrees
41bd100dd	fix	fallback to build target preserveSymlinks option in karma runner
6d9b360e5	fix	prevent esbuild service hang on internal component stylesheet builds
85c53d990	fix	prevent externalizing builder-injected i18n locale data
004cc4104	fix	strip all vite id prefixes from minified code with external dependencies
09d0a11a8	perf	enable fast-path AST printing with sourcemaps in AotCompilation

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 26, 2026

4.3.0, 3.15.0 - 2026-06-27

Security

[5.2.0] - 2026-06-26

Added

Removed

Fixed

[5.1.0] - 2026-06-23

Added

Changed

[5.0.0] - 2026-06-20

Added

Changed

21.2.19

@​angular-devkit/build-angular

21.2.18

@​angular/cli

@​angular/build

21.2.17

@​angular/build

21.2.16

@​angular/cli

@​angular/ssr

21.2.15

@​angular/cli

21.2.14

@​angular/cli

@​angular/build

21.2.19 (2026-07-09)

@​angular-devkit/build-angular

20.3.32 (2026-07-09)

@​angular-devkit/build-angular

22.1.0-next.3 (2026-07-09)

@​angular/build

@​angular/ssr

22.0.6 (2026-07-08)

electron-builder@26.15.3

What's Changed

electron-builder@26.15.2

What's Changed

electron-builder@26.15.1

What's Changed

electron-builder@26.15.0

What's Changed

26.15.3

Patch Changes

26.15.2

Patch Changes

26.15.1

Patch Changes

v10.8.0

Features

Bug Fixes

Documentation

Chores

v10.7.0

Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@angular-devkit/build-angular`

`@angular/cli`

`@angular/build`

`@angular/build`

`@angular/cli`

`@angular/ssr`

`@angular/cli`

`@angular/cli`

`@angular/build`

`@angular-devkit/build-angular`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/ssr`