Skip to content

fix(deps): update minor and patch version changes to v4.2.0#141

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate-minor-and-patch-version-changes
Jun 7, 2026
Merged

fix(deps): update minor and patch version changes to v4.2.0#141
renovate[bot] merged 1 commit into
mainfrom
renovate-minor-and-patch-version-changes

Conversation

@renovate

@renovate renovate Bot commented Jun 6, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
js-yaml 4.1.14.2.0 age confidence

Release Notes

nodeca/js-yaml (js-yaml)

v4.2.0

Compare Source

Added
  • Added docs/safety.md with notes about processing untrusted YAML.
  • Added maxDepth (100) loader option. Not a problem, but gives a better
    exception instead of RangeError on stack overflow.
  • Added maxMergeSeqLength (20) loader option. Not a problem after merge fix,
    but an additional restriction for safety.
  • Added sourcemaps to dist/ builds.
Changed
  • Stop resolving numbers with underscores as numeric scalars, #​627.
  • Switched dev toolchains to Vite / neostandard.
  • Updated demo.
  • Reorganized tests.
  • dist/ files are no longer kept in the repository.
Fixed
  • Fix parsing of properties on the first implicit block mapping key, #​62.
  • Fix trailing whitespace handling when folding flow scalar lines, #​307.
  • Reject top-level block scalars without content indentation, #​280.
  • Ensure numbers survive round-trip, #​737.
  • Fix test coverage for issue #​221.
  • Fix flow scalar trailing whitespace folding, #​307.
  • Fix digits in YAML named tag handles.
Security
  • Fix potential DoS via quadratic complexity in merge - deduplicate repeated
    elements (makes sense for malformed files > 10K).

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • "after 2pm on Saturday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Jun 6, 2026

Copy link
Copy Markdown
Sizewatcher found no problematic size increases.

git has no changes (553 kB)
Largest files:
Largest files in repository checkout:

347KiB package-lock.json
29KiB README.md
11KiB LICENSE
7.6KiB test/cli.test.js
7.1KiB lib/checkout.js
6.3KiB lib/compare.js
5.0KiB test/mocha-capture-console.js
4.5KiB lib/report.js
4.3KiB test/config.test.js
3.9KiB lib/render.js

Largest files among new changes:

347KiB package-lock.json
1.3KiB package.json
node_modules +0.7% (73 MB => 73.5 MB)
Largest production node modules:
@adobe/sizewatcher@1.4.1 (67 deps, 16.94mb, 1086 files, ©undefined)
╭───────────────────────┬──────────────┬───────────┬───────┬───────────┬────────────┬───────────╮
│ Name │ Dependencies │ Size │ Files │ Native │ License │ Deprec │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ @octokit/rest@19.0.3 │ 25 │ 11mb │ 380 │ │ MIT │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ glob@10.3.5 │ 27 │ 3.2mb │ 367 │ │ ISC │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ js-yaml@4.2.0 │ 1 │ 1021.02kb │ 43 │ │ MIT │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ simple-git@3.22.0 │ 4 │ 934.56kb │ 142 │ │ MIT │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ xbytes@1.9.1 │ │ 74.45kb │ 11 │ │ Apache-2.0 │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ debug@4.4.3 │ 1 │ 48.35kb │ 11 │ │ MIT │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ tmp@0.2.7 │ │ 39.3kb │ 4 │ │ MIT │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ deepmerge@4.3.1 │ │ 30.43kb │ 11 │ │ MIT │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ require-dir@1.2.0 │ │ 16.87kb │ 40 │ │ MIT │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ get-folder-size@5.0.0 │ │ 11.65kb │ 5 │ │ MIT │ │
├───────────────────────┼──────────────┼───────────┼───────┼───────────┼────────────┼───────────┤
│ pretty-bytes@5.6.0 │ │ 11.27kb │ 5 │ │ MIT │ │
╰───────────────────────┴──────────────┴───────────┴───────┴───────────┴────────────┴───────────╯
npm_package has no changes (23.2 kB)
Package contents:
npm notice
📦 @adobe/sizewatcher@1.4.1
Tarball Contents
3.1kB CHANGELOG.md
11.3kB LICENSE
29.8kB README.md
743B index.js
7.3kB lib/checkout.js
3.9kB lib/comparators/custom.js
3.6kB lib/comparators/git.js
3.0kB lib/comparators/node_modules.js
2.3kB lib/comparators/npm_package.js
6.4kB lib/compare.js
1.7kB lib/config.js
2.6kB lib/github.js
4.0kB lib/render.js
4.6kB lib/report.js
2.1kB lib/size.js
2.7kB lib/sizewatcher.js
1.3kB package.json
Tarball Details
name: @adobe/sizewatcher
version: 1.4.1
filename: adobe-sizewatcher-1.4.1.tgz
package size: 23.2 kB
unpacked size: 90.5 kB
shasum: 903fa03f0062e7e87d321dc6838e215ae63c57ea
integrity: sha512-jVlwrYSxwHq6m[...]p+4Di5TPUQPhQ==
total files: 17
npm notice
Notes
  • PR branch: renovate-minor-and-patch-version-changes @ eeecbd0
  • Base branch: main @ aa16741
  • Sizewatcher v1.4.1
  • Effective Configuration:
limits:
  fail: 100%
  warn: 30%
  ok: '-10%'
report:
  githubComment: true
  githubStatus: false
comparators: {}

@coveralls

Copy link
Copy Markdown
Collaborator

Coverage Status

coverage: 59.677%. remained the same — renovate-minor-and-patch-version-changes into main

@renovate renovate Bot merged commit a3582ed into main Jun 7, 2026
7 checks passed
@renovate renovate Bot deleted the renovate-minor-and-patch-version-changes branch June 7, 2026 02:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant