Skip to content

Bump js-yaml from 3.14.1 to 3.15.2 in /rendertron/middleware - #367

Merged
f3l1x merged 1 commit into
masterfrom
dependabot/npm_and_yarn/rendertron/middleware/js-yaml-3.15.2
Oct 21, 2026
Merged

Bump js-yaml from 3.14.1 to 3.15.2 in /rendertron/middleware#367
f3l1x merged 1 commit into
masterfrom
dependabot/npm_and_yarn/rendertron/middleware/js-yaml-3.15.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 3.14.1 to 3.15.2.

Changelog

Sourced from js-yaml's changelog.

3.15.2 - 2026-08-26

Changed

  • [backport] Hard-limit merge sequence size to 100.

Security

  • [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

3.15.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.

3.15.0 - 2026-06-27

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one safeLoad() / safeLoadAll() call.

[3.14.2] - 2025-11-15

Security

  • Fix prototype pollution in merge (<<).
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026
@f3l1x

f3l1x commented Oct 21, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
Bump js-yaml from 3.14.1 to 3.15.2 in /rendertron/middleware
d6744fb 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.15.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...3.15.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/rendertron/middleware/js-yaml-3.15.2 branch from befc08c to d6744fb Compare October 21, 2026 19:22
@f3l1x
f3l1x merged commit b67a5a7 into master Oct 21, 2026
3 checks passed
@f3l1x
f3l1x deleted the dependabot/npm_and_yarn/rendertron/middleware/js-yaml-3.15.2 branch October 21, 2026 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@f3l1x