From 1a8ac57d461ce2f9b1db2f1ab8a1de678cea5d7d Mon Sep 17 00:00:00 2001 From: Joker Date: Tue, 22 Sep 2026 00:39:46 +0000 Subject: [PATCH] fix(deps): bump js-yaml to 4.3.2 (GHSA-2883-xcg3-v3hh, dev-only) --- package.json | 3 ++- pnpm-lock.yaml | 12 +++++++----- 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index f9bf9ba8..83586ef1 100644 --- a/package.json +++ b/package.json @@ -103,7 +103,8 @@ "@appium/logger>lodash": "4.18.1", "monaco-editor>dompurify": "3.4.13", "next>sharp": "0.35.4", - "three-stdlib>fflate": "0.6.11" + "three-stdlib>fflate": "0.6.11", + "js-yaml": "^4.3.2" } } } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index f69efa3b..13897f5d 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -11,6 +11,7 @@ overrides: monaco-editor>dompurify: 3.4.13 next>sharp: 0.35.4 three-stdlib>fflate: 0.6.11 + js-yaml: ^4.3.2 importers: @@ -2778,6 +2779,7 @@ packages: eslint@9.39.4: resolution: {integrity: sha512-XoMjdBOwe/esVgEvLmNsD3IRHkm7fbKIUGvrleloJXUZgDHig2IPWNniv+GwjyJXzuNqVjlr5+4yVUZjycJwfQ==} engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0} + deprecated: This version is no longer supported. Please see https://eslint.org/version-support for other options. hasBin: true peerDependencies: jiti: '*' @@ -3418,8 +3420,8 @@ packages: js-tokens@4.0.0: resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} - js-yaml@4.3.1: - resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==} + js-yaml@4.3.2: + resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==} hasBin: true jsdom@28.1.0: @@ -5586,7 +5588,7 @@ snapshots: globals: 14.0.0 ignore: 5.3.2 import-fresh: 3.3.1 - js-yaml: 4.3.1 + js-yaml: 4.3.2 minimatch: 3.1.5 strip-json-comments: 3.1.1 transitivePeerDependencies: @@ -7484,7 +7486,7 @@ snapshots: dependencies: env-paths: 2.2.1 import-fresh: 3.3.1 - js-yaml: 4.3.1 + js-yaml: 4.3.2 parse-json: 5.2.0 optionalDependencies: typescript: 7.0.2 @@ -8769,7 +8771,7 @@ snapshots: js-tokens@4.0.0: {} - js-yaml@4.3.1: + js-yaml@4.3.2: dependencies: argparse: 2.0.1