From e0d5bdc790fa1c5d7767439a141061fe5585a663 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 23:45:22 +0000
Subject: [PATCH 1/2] Update dependency js-yaml to ^5.2.2

---
 package-lock.json | 14 +++++++-------
 package.json      |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 742f692..34d82c7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "function-once": "^3.0.1",
         "import-meta-resolve": "^4.2.0",
         "is-binary-path": "^3.0.0",
-        "js-yaml": "^5.1.0",
+        "js-yaml": "^5.2.2",
         "json-sorted-stringify": "^1.0.2",
         "json5": "^2.2.3",
         "kasi": "^2.0.1",
@@ -4542,9 +4542,9 @@
       "dev": true
     },
     "node_modules/js-yaml": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.1.0.tgz",
-      "integrity": "sha512-s8VA5jkR8f22S3NAXmhKPFqGUduqZGlsufabVOgN14iTdw/RXcym7bKkbwjxLK9Yw2lEvvmJjFp119+KPeo8Kg==",
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.2.tgz",
+      "integrity": "sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==",
       "funding": [
         {
           "type": "github",
@@ -10223,9 +10223,9 @@
       "dev": true
     },
     "js-yaml": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.1.0.tgz",
-      "integrity": "sha512-s8VA5jkR8f22S3NAXmhKPFqGUduqZGlsufabVOgN14iTdw/RXcym7bKkbwjxLK9Yw2lEvvmJjFp119+KPeo8Kg==",
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.2.tgz",
+      "integrity": "sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==",
       "requires": {
         "argparse": "^2.0.1"
       }
diff --git a/package.json b/package.json
index dc43720..41bbe81 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "function-once": "^3.0.1",
     "import-meta-resolve": "^4.2.0",
     "is-binary-path": "^3.0.0",
-    "js-yaml": "^5.1.0",
+    "js-yaml": "^5.2.2",
     "json-sorted-stringify": "^1.0.2",
     "json5": "^2.2.3",
     "kasi": "^2.0.1",

From 8939a3f49ed3ac3b3849c285dbcb35e895e4a35c Mon Sep 17 00:00:00 2001
From: fisker Cheung <lionkay@gmail.com>
Date: Sat, 25 Jul 2026 07:50:18 +0800
Subject: [PATCH 2/2] Only group non-major dev dependencies

---
 .github/renovate.json5 | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 00ea74a..4567a45 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -4,12 +4,13 @@
   rangeStrategy: "bump",
   packageRules: [
     {
-      groupName: "GitHub Actions",
-      matchManagers: ["github-actions"],
+      groupName: "non-major dev-dependencies",
+      matchDepTypes: ["devDependencies"],
+      matchUpdateTypes: ["minor", "patch"],
     },
     {
-      groupName: "devDependencies",
-      matchDepTypes: ["devDependencies"],
+      groupName: "GitHub Actions",
+      matchManagers: ["github-actions"],
     },
   ],
   ignoreDeps: ["node"],