Open
Conversation
Snyk has created this PR to upgrade yaml from 2.2.2 to 2.7.1. See this package in npm: yaml See this project in Snyk: https://app.snyk.io/org/defiton/project/9c50e92a-1460-4a00-8ddc-6fef156b1b7e?utm_source=github&utm_medium=referral&page=upgrade-pr
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade yaml from 2.2.2 to 2.7.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 23 versions ahead of your current version.
The recommended version was released 23 days ago.
Release notes
Package name: yaml
-
2.7.1 - 2025-03-29
- Do not allow seq with single-line collection value on same line with map key (#603)
- Improve warning & avoid TypeError on bad YAML 1.1 nodes (#610)
-
2.7.0 - 2024-12-31
- Use .ts extension in all relative imports (#591)
- Ignore newline after block seq indicator as space before value (#590)
- Require Node.js 14.18 or later (was 14.6) (#598)
-
2.6.1 - 2024-11-19
- Do not strip
- Tighten regexp for JSON
- Default to literal block scalar if folded would overflow (#585)
-
2.6.0 - 2024-10-13
- Use a proper tag for
- Add
- Stringify a Document as a Document (#576)
- Add sponsorship by Manifest
-
2.5.1 - 2024-09-03
- Include range in flow sequence pair maps (#573)
-
2.5.0 - 2024-07-24
- Add
- Require newline in all cases for props on block sequence (#557)
- Always reset indentation in lexer on
- Ignore
- Drop unused
-
2.4.5 - 2024-06-08
- Improve tab handling (#553, yaml-test-suite tests DK95 & Y79Y)
-
2.4.4 - 2024-06-08
- Allow comment after top-level block scalar with explicit indent indicator (#547)
- Allow tab as indent for line comments before nodes (#548)
- Do not allow tab before block collection (#549)
- In flow collections, allow
- Require indentation for
- Require indentation from block scalar header & flow collections in mapping values (#553)
-
2.4.3 - 2024-06-02
- Improve error when parsing a non-string value (#459)
- Do not parse
- Support
- Check for non-node complex keys when stringifying with simpleKeys (#541)
-
2.4.2 - 2024-04-28
- Restrict YAML 1.1 boolean strings to their explicit capitalization (#530)
- Add sponsorship by Scipress (#536)
-
2.4.1 - 2024-03-06
-
2.4.0 - 2024-02-25
-
2.3.4 - 2023-11-03
-
2.3.3 - 2023-10-14
-
2.3.2 - 2023-08-28
-
2.3.1 - 2023-05-26
-
2.3.0 - 2023-05-23
-
2.3.0-5 - 2023-05-06
-
2.3.0-4 - 2023-04-18
-
2.3.0-3 - 2023-04-14
-
2.3.0-2 - 2023-04-14
-
2.3.0-1 - 2023-04-04
-
2.3.0-0 - 2023-03-11
-
2.2.2 - 2023-04-24
from yaml GitHub release notesThe library is now available on JSR as @ eemeli/yaml and on deno.land/x as yaml. In addition to Node.js and browsers, it should work in Deno, Bun, and Cloudflare Workers.
:00seconds from!!timestampvalues (#578, with thanks to @ qraynaud)!!bool(#587, with thanks to @ vra5107)!!merge <<keys (#580)stringKeysparse option (#581)--indentoption to CLI tool (#559, with thanks to @ danielbayley)...(#558)minContentWidthif greater thanlineWidth(#562)Collection.maxFlowStringSingleLineLength(#522, #421)With special thanks to @ RedCMD for finding and reporting all of the following:
[]{}immediately after:with plain key (#550)?explicit-key contents (#551)-.NaNor+.nanas NaN (#546)#within%TAGprefixes with trailing#commentsImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: