From 589aac0e9932cf7e57e14662d12c6a1defd316d0 Mon Sep 17 00:00:00 2001 From: lua-stefan-kruger Date: Tue, 11 Aug 2026 06:56:14 +0000 Subject: [PATCH] security: js-yaml ^3.15.1 (dependabot) Bump js-yaml override to ^3.15.1 in both npm projects to remediate dependabot alerts #16 and #17 (js-yaml <3.15.1). - root: js-yaml@3 -> ^3.15.1 (resolves 3.15.1); js-yaml@4 -> ^4.3.1 (4.3.1) - mcp/lua-platform: js-yaml@3 -> ^3.15.1 (resolves 3.15.1) Lockfiles regenerated surgically (npm install --package-lock-only); diffs touch only js-yaml. Co-Authored-By: Claude Opus 4.8 --- mcp/lua-platform/package-lock.json | 6 +++--- mcp/lua-platform/package.json | 2 +- package-lock.json | 12 ++++++------ package.json | 4 ++-- 4 files changed, 12 insertions(+), 12 deletions(-) diff --git a/mcp/lua-platform/package-lock.json b/mcp/lua-platform/package-lock.json index 2ba6bfe..ed69547 100644 --- a/mcp/lua-platform/package-lock.json +++ b/mcp/lua-platform/package-lock.json @@ -3207,9 +3207,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", - "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "license": "MIT", "dependencies": { diff --git a/mcp/lua-platform/package.json b/mcp/lua-platform/package.json index 956763e..83a1804 100644 --- a/mcp/lua-platform/package.json +++ b/mcp/lua-platform/package.json @@ -26,7 +26,7 @@ }, "overrides": { "@babel/core": "^7.29.6", - "js-yaml@^3.13.1": "3.15.0", + "js-yaml@3": "^3.15.1", "brace-expansion@1": "1.1.16" } } diff --git a/package-lock.json b/package-lock.json index c1f95e2..c9a8a40 100644 --- a/package-lock.json +++ b/package-lock.json @@ -655,9 +655,9 @@ } }, "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": { - "version": "3.15.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz", - "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "license": "MIT", "dependencies": { @@ -3306,9 +3306,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", + "version": "4.3.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", + "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", "dev": true, "funding": [ { diff --git a/package.json b/package.json index bbe6cf1..13b9110 100644 --- a/package.json +++ b/package.json @@ -20,8 +20,8 @@ }, "overrides": { "@babel/core": "^7.29.6", - "js-yaml@^4.1.0": "4.3.0", - "js-yaml@^3.13.1": "3.15.0", + "js-yaml@4": "^4.3.1", + "js-yaml@3": "^3.15.1", "brace-expansion@1": "1.1.16" } }