From 6110e57ef26c841f88258de8b89d4de3424b9e70 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 22 Jul 2026 11:07:54 +0000 Subject: [PATCH] chore(deps): bump js-yaml from 4.1.1 to 4.3.0 Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- pnpm-lock.yaml | 58 ++++++++++++------- services/apps/cron_service/package.json | 2 +- services/apps/packages_worker/package.json | 2 +- .../package.json | 2 +- 4 files changed, 39 insertions(+), 25 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 048ef77fc9..02d38f65ec 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -659,8 +659,8 @@ importers: specifier: ^1.3.0 version: 1.3.2 js-yaml: - specifier: ^4.1.0 - version: 4.1.1 + specifier: ^4.3.0 + version: 4.3.0 p-queue: specifier: ^8.1.0 version: 8.1.0 @@ -1349,8 +1349,8 @@ importers: specifier: ^5.8.0 version: 5.8.0 js-yaml: - specifier: ^4.1.1 - version: 4.1.1 + specifier: ^4.3.0 + version: 4.3.0 jsonwebtoken: specifier: ^9.0.0 version: 9.0.3 @@ -1725,8 +1725,8 @@ importers: specifier: ^1.6.8 version: 1.8.1 js-yaml: - specifier: ^4.1.1 - version: 4.1.1 + specifier: ^4.3.0 + version: 4.3.0 moment: specifier: ~2.29.4 version: 2.29.4 @@ -4898,6 +4898,9 @@ packages: '@types/estree@1.0.8': resolution: {integrity: sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==} + '@types/estree@1.0.9': + resolution: {integrity: sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==} + '@types/express-serve-static-core@4.19.0': resolution: {integrity: sha512-bGyep3JqPCRry1wq+O5n7oiBgGWmeIJXPjXXCo8EK0u8duZGSYar7cGqd3ML2JUsLGeB7fmc06KYo9fLGWqPvQ==} @@ -7078,7 +7081,7 @@ packages: git-raw-commits@4.0.0: resolution: {integrity: sha512-ICsMM1Wk8xSGMowkOmPrzo2Fgmfo4bMHLNX6ytHjajRJUqvHOw/TFapQ+QG75c3X/tTDDhOSRPGC52dDbNM8FQ==} engines: {node: '>=16'} - deprecated: This package is no longer maintained. For the JavaScript API, please use @conventional-changelog/git-client instead. + deprecated: Deprecated and no longer maintained. Use @conventional-changelog/git-client instead. hasBin: true glob-parent@5.1.2: @@ -7100,11 +7103,11 @@ packages: glob@6.0.4: resolution: {integrity: sha512-MKZeRNyYZAVVVG1oZeLaWie1uweH40m9AZwIwxyPbTSX4hHrVYSzLg0Ro5Z5R7XKkIX+Cc6oD1rqeDJnwsB8/A==} - deprecated: Glob versions prior to v9 are no longer supported + deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me glob@7.2.3: resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==} - deprecated: Glob versions prior to v9 are no longer supported + deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me global-directory@4.0.1: resolution: {integrity: sha512-wHTUcDUoZ1H5/0iVqEudYW4/kAlN5cZ3j/bXn0Dpbizl9iaUVeWSHqiOjsgk6OW2bkLclbBjzewBz6weQ1zA2Q==} @@ -7704,14 +7707,18 @@ packages: js-tokens@9.0.1: resolution: {integrity: sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ==} - js-yaml@3.14.2: - resolution: {integrity: sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==} + js-yaml@3.15.0: + resolution: {integrity: sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==} hasBin: true js-yaml@4.1.1: resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==} hasBin: true + js-yaml@4.3.0: + resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==} + hasBin: true + jsesc@2.5.2: resolution: {integrity: sha512-OYu7XEzjkCQ3C5Ps3QIZsQfNpqoJyZZA99wd9aWd05NCtC5pWOkShK2mkL6HXQR6/Cy2lbNdPlZBpuQHXE63gA==} engines: {node: '>=4'} @@ -8261,8 +8268,8 @@ packages: engines: {node: '>= 4.4.x'} hasBin: true - needle@https://codeload.github.com/clearbit/needle/tar.gz/84d28b5f2c3916db1e7eb84aeaa9d976cc40054b: - resolution: {tarball: https://codeload.github.com/clearbit/needle/tar.gz/84d28b5f2c3916db1e7eb84aeaa9d976cc40054b} + needle@git+https://git@github.com:clearbit/needle.git#84d28b5f2c3916db1e7eb84aeaa9d976cc40054b: + resolution: {commit: 84d28b5f2c3916db1e7eb84aeaa9d976cc40054b, repo: git@github.com:clearbit/needle.git, type: git} version: 0.7.10 engines: {node: '>= 0.10.x'} hasBin: true @@ -12436,7 +12443,7 @@ snapshots: globals: 13.24.0 ignore: 5.3.1 import-fresh: 3.3.0 - js-yaml: 4.1.1 + js-yaml: 4.3.0 minimatch: 3.1.2 strip-json-comments: 3.1.1 transitivePeerDependencies: @@ -13079,7 +13086,7 @@ snapshots: '@jsdevtools/ono': 7.1.3 '@types/json-schema': 7.0.15 call-me-maybe: 1.0.2 - js-yaml: 4.1.1 + js-yaml: 4.3.0 '@readme/openapi-parser@2.5.1(openapi-types@12.1.3)': dependencies: @@ -14134,12 +14141,15 @@ snapshots: '@types/eslint@9.6.1': dependencies: - '@types/estree': 1.0.8 + '@types/estree': 1.0.9 '@types/json-schema': 7.0.15 optional: true '@types/estree@1.0.8': {} + '@types/estree@1.0.9': + optional: true + '@types/express-serve-static-core@4.19.0': dependencies: '@types/node': 20.12.7 @@ -15271,7 +15281,7 @@ snapshots: bluebird: 2.11.0 create-error: 0.3.1 lodash: 4.17.21 - needle: https://codeload.github.com/clearbit/needle/tar.gz/84d28b5f2c3916db1e7eb84aeaa9d976cc40054b + needle: git+https://git@github.com:clearbit/needle.git#84d28b5f2c3916db1e7eb84aeaa9d976cc40054b cli-boxes@2.2.1: {} @@ -15520,7 +15530,7 @@ snapshots: dependencies: env-paths: 2.2.1 import-fresh: 3.3.0 - js-yaml: 4.1.1 + js-yaml: 4.3.0 parse-json: 5.2.0 optionalDependencies: typescript: 5.6.3 @@ -17013,7 +17023,7 @@ snapshots: gray-matter@4.0.3: dependencies: - js-yaml: 3.14.2 + js-yaml: 3.15.0 kind-of: 6.0.3 section-matter: 1.0.0 strip-bom-string: 1.0.0 @@ -17482,7 +17492,7 @@ snapshots: js-tokens@9.0.1: {} - js-yaml@3.14.2: + js-yaml@3.15.0: dependencies: argparse: 1.0.10 esprima: 4.0.1 @@ -17491,6 +17501,10 @@ snapshots: dependencies: argparse: 2.0.1 + js-yaml@4.3.0: + dependencies: + argparse: 2.0.1 + jsesc@2.5.2: {} json-bigint@1.0.0: @@ -18008,7 +18022,7 @@ snapshots: transitivePeerDependencies: - supports-color - needle@https://codeload.github.com/clearbit/needle/tar.gz/84d28b5f2c3916db1e7eb84aeaa9d976cc40054b: + needle@git+https://git@github.com:clearbit/needle.git#84d28b5f2c3916db1e7eb84aeaa9d976cc40054b: dependencies: iconv-lite: 0.4.24 @@ -18196,7 +18210,7 @@ snapshots: oas-normalize@6.0.0(encoding@0.1.13)(openapi-types@12.1.3): dependencies: '@readme/openapi-parser': 2.5.1(openapi-types@12.1.3) - js-yaml: 4.1.1 + js-yaml: 4.3.0 node-fetch: 2.7.0(encoding@0.1.13) swagger2openapi: 7.0.8(encoding@0.1.13) transitivePeerDependencies: diff --git a/services/apps/cron_service/package.json b/services/apps/cron_service/package.json index 1077a2e0b1..a85e402ef7 100644 --- a/services/apps/cron_service/package.json +++ b/services/apps/cron_service/package.json @@ -28,7 +28,7 @@ "@crowd/telemetry": "workspace:*", "@crowd/redis": "workspace:*", "@aws-sdk/client-s3": "^3.700.0", - "js-yaml": "^4.1.0", + "js-yaml": "^4.3.0", "@dsnp/parquetjs": "^1.7.0", "cron": "^2.1.0", "cron-time-generator": "^1.3.0", diff --git a/services/apps/packages_worker/package.json b/services/apps/packages_worker/package.json index 825d0adf18..62b2859e05 100644 --- a/services/apps/packages_worker/package.json +++ b/services/apps/packages_worker/package.json @@ -96,7 +96,7 @@ "@temporalio/activity": "~1.17.2", "@temporalio/client": "~1.17.2", "@temporalio/workflow": "~1.17.2", - "js-yaml": "^4.1.1", + "js-yaml": "^4.3.0", "jsonwebtoken": "^9.0.0", "semver": "^7.6.0", "axios": "^1.16.1", diff --git a/services/apps/security_best_practices_worker/package.json b/services/apps/security_best_practices_worker/package.json index cbe29e4051..a14a667ba7 100644 --- a/services/apps/security_best_practices_worker/package.json +++ b/services/apps/security_best_practices_worker/package.json @@ -24,7 +24,7 @@ "@temporalio/client": "~1.17.2", "@temporalio/workflow": "~1.17.2", "axios": "^1.6.8", - "js-yaml": "^4.1.1", + "js-yaml": "^4.3.0", "moment": "~2.29.4", "tsx": "^4.7.1", "typescript": "^5.6.3"