Skip to content

[Dependencies]: Bump js-yaml from 5.2.3 to 5.3.0 in the dependencies-prod group across 1 directory - #712

Merged
elchininet merged 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-prod-7f62fc18dd
Aug 16, 2026
Merged

[Dependencies]: Bump js-yaml from 5.2.3 to 5.3.0 in the dependencies-prod group across 1 directory#712
elchininet merged 1 commit into
masterfrom
dependabot/npm_and_yarn/dependencies-prod-7f62fc18dd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies-prod group with 1 update in the / directory: js-yaml.

Updates js-yaml from 5.2.3 to 5.3.0

Changelog

Sourced from js-yaml's changelog.

[5.3.0] - 2026-08-14

This release focuses on reworking the documentation and making small architectural improvements before moving forward.

Added

  • Added completely new documentation.
  • Exported DUMP_SCHEMA, the default schema used by the dumper.
  • Added YAMLException.throwAt() for throwing an error at a source position.

Changed

  • Changed flat constant exports to grouped exports: EVENT_ID, SCALAR_STYLE, COLLECTION_STYLE, and CHOMPING_MODE, along with their value types. The old exports are still preserved, but deprecated.
  • Made identify mandatory for custom tag definitions. Use identify: () => false for load-only tags.

Deprecated

  • Deprecated flat constant exports. Use grouped ones instead.

Removed

  • Removed the MERGE_KEY export (not used anymore after last fixes).

Fixed

  • Validate << sequence items at merge time, so aliased merge sources are checked too.
  • Resolve << outside of a mapping key as the plain string '<<', matching v4, instead of leaking an internal symbol into the result.
Commits
  • 04db458 5.3.0 released
  • 22ce0a0 Changelog update
  • fae37b8 fix: << outside a mapping key no longer leaks the internal merge symbol
  • b62ef83 fix: validate << sequence items at merge time, so aliased sources are check...
  • cc665ec docs: review and update annotations
  • 2aa24a6 Changelog update
  • eec6902 Restore deprecated parser constant exports
  • 03397ac Move throwErrorAt to YAMLException as throwAt
  • d9dd2c7 docs: new condensed theme
  • 0f898e6 docs: annotation tweaks
  • Additional commits viewable in compare view

@coveralls

coveralls commented Aug 16, 2026

Copy link
Copy Markdown

Coverage Status

coverage: 100.0%. remained the same — dependabot/npm_and_yarn/dependencies-prod-7f62fc18dd into master

@elchininet

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps the dependencies-prod group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml).


Updates `js-yaml` from 5.2.3 to 5.3.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.3...5.3.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies-prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title [Dependencies]: Bump js-yaml from 5.2.3 to 5.3.0 in the dependencies-prod group [Dependencies]: Bump js-yaml from 5.2.3 to 5.3.0 in the dependencies-prod group across 1 directory Aug 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-prod-7f62fc18dd branch from 5ed9f36 to 689f688 Compare August 16, 2026 09:45
@elchininet
elchininet merged commit 1da2e4a into master Aug 16, 2026
5 checks passed
@elchininet
elchininet deleted the dependabot/npm_and_yarn/dependencies-prod-7f62fc18dd branch August 16, 2026 10:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants