Bump js-yaml and swagger-ui in /frontend

[dependabot]

Bumps js-yaml to 4.3.1 and updates ancestor dependency swagger-ui. These dependencies need to be updated together.

Updates js-yaml from 4.1.1 to 4.3.1

Changelog

Sourced from js-yaml's changelog.

4.3.1 - 2026-07-31

Security

• [backport] Remove quadratic complexity from !!omap duplicate key detection.

4.3.0 - 2026-06-27

Added

• [backport] Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.

Fixed

• Restore umd builds back to es5.

Removed

• [backport] maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

[4.2.0] - 2026-06-01

Added

• Added docs/safety.md with notes about processing untrusted YAML.
• Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.
• Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.
• Added sourcemaps to dist/ builds.

Changed

• Stop resolving numbers with underscores as numeric scalars, #627.
• Switched dev toolchains to Vite / neostandard.
• Updated demo.
• Reorganized tests.
• dist/ files are no longer kept in the repository.

Fixed

• Fix parsing of properties on the first implicit block mapping key, #62.
• Fix trailing whitespace handling when folding flow scalar lines, #307.
• Reject top-level block scalars without content indentation, #280.
• Ensure numbers survive round-trip, #737.
• Fix test coverage for issue #221.
• Fix flow scalar trailing whitespace folding, #307.
• Fix digits in YAML named tag handles.

Security

• Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).

[3.14.2] - 2025-11-15

Security

... (truncated)

Commits

• 86e91b8 4.3.1 released
• c3cc4b0 Backport quadratic complexity fix for !!omap
• 33d05b5 4.3.0 released
• 663bfab Drop demo publish, to not override new v5 one.
• 1cb8c7b Add v4-legacy tag for publish
• 02f27af Restore umd builds back to es5
• 8be84ed Fix es5 compatibility
• 59423c6 Replace maxMergeSeqLength option with maxTotalMergeKeys (more robust). Ba...
• 6842ef6 doc polish
• 590dbab 4.2.0 released
• Additional commits viewable in compare view

Updates swagger-ui from 5.31.2 to 5.32.13

Release notes

Sourced from swagger-ui's releases.

v5.32.13

5.32.13 (2026-08-11)

Bug Fixes

• a11y: add aria-labels to copy-to-clipboard buttons (#10842) (e6ce7d8)
• a11y: add skip-to-operations link, banner and main landmarks (#10849) (92669ea)
• a11y: close Authorization popup with Escape key and backdrop click (#10987) (311b0d2)
• a11y: name and state for dark-mode toggle button (#10848) (13a90fa)
• a11y: restore icon visibility in Windows High Contrast Mode (#10846) (edec467)
• a11y: topbar logo and dark-mode toggle visible in HCM (#10847) (6beaebd)
• a11y: use for model titles to convey emphasis semantically (#10876) (b4501b6)
• ci: bump cycjimmy/semantic-release-action to v6.0.0 (#11001) (9b3eacb)
• ci: fix Trivy security scan and add dependency vulnerability scan (#10996) (ff221a8)
• style: reduce padding on inline code blocks in markdown (#7569) (#10789) (a1a6cdc)

Huge thanks to our contributors who made this release happen: @​bmatar, @​yogeshwaran-c, @​jonnyjackson26, @​rkdfx, and @​adrianodpdiaz

v5.32.12

5.32.12 (2026-08-03)

Bug Fixes

• deps: bump swagger-client to v3.37.8 (#10980) (1a88283)

v5.32.11

5.32.11 (2026-07-22)

Bug Fixes

• deps: bump dompurify from 3.4.11 to 3.4.12 (#10972) (0aa8457)
• deps: bump immutable to 4.3.9 (#10969) (159423c)

v5.32.10

5.32.10 (2026-07-21)

Bug Fixes

• deps: bump axios from 1.16.0 to 1.18.1 (#10963) (878390c)
• deps: bump swagger-client to 3.37.7 (#10968) (d353bcd)

v5.32.9

5.32.9 (2026-07-17)

... (truncated)

Commits

• 2a33d78 chore(release): cut the 5.32.13 release
• 9b3eacb fix(ci): bump cycjimmy/semantic-release-action to v6.0.0 (#11001)
• 5fd1674 chore(deps): bump docker/build-push-action (#10998)
• 19302a9 chore(deps): bump dependabot/fetch-metadata (#10997)
• a1a6cdc fix(style): reduce padding on inline code blocks in markdown (#7569) (#10789)
• e6ce7d8 fix(a11y): add aria-labels to copy-to-clipboard buttons (#10842)
• 92669ea fix(a11y): add skip-to-operations link, banner and main landmarks (#10849)
• edec467 fix(a11y): restore icon visibility in Windows High Contrast Mode (#10846)
• 311b0d2 fix(a11y): close Authorization popup with Escape key and backdrop click (#10987)
• 6beaebd fix(a11y): topbar logo and dark-mode toggle visible in HCM (#10847)
• Additional commits viewable in compare view