Skip to content

Bump js-yaml from 3.15.1 to 3.15.2 - #2223

Merged
graduta merged 2 commits into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.2
Sep 16, 2026
Merged

graduta merged 2 commits into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 3.15.1 to 3.15.2.

Changelog

Sourced from js-yaml's changelog.

3.15.2 - 2026-08-26

Changed

  • [backport] Hard-limit merge sequence size to 100.

Security

  • [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 10, 2026
@dependabot
dependabot Bot requested a review from isaachilly as a code owner September 10, 2026 03:09
@dependabot dependabot Bot added javascript Pull requests that update Javascript code dependencies Pull requests that update a dependency file labels Sep 10, 2026
@codecov

codecov Bot commented Sep 10, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 46.18%. Comparing base (bfdec41) to head (fef6565).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2223   +/-   ##
=======================================
  Coverage   46.17%   46.18%           
=======================================
  Files        1040     1040           
  Lines       17160    17160           
  Branches     3133     3133           
=======================================
+ Hits         7924     7925    +1     
+ Misses       9236     9235    -1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.15.2 branch from 36c090b to f892e7e Compare September 16, 2026 10:26
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.15.1 to 3.15.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.15.1...3.15.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.15.2 branch from f892e7e to 7741f1f Compare September 16, 2026 10:41
@graduta
graduta merged commit 4621207 into main Sep 16, 2026
25 checks passed
@graduta
graduta deleted the dependabot/npm_and_yarn/js-yaml-3.15.2 branch September 16, 2026 11:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Development

Successfully merging this pull request may close these issues.

1 participant