From a27ddbbf6ca8a7d35934d983b3e5c3da048b4687 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 17 Aug 2026 07:42:21 +0000 Subject: [PATCH] chore(deps): update dependency js-yaml to v5 --- pnpm-lock.yaml | 54 +++++++++++++++++++++------------------------ pnpm-workspace.yaml | 2 +- 2 files changed, 26 insertions(+), 30 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index f174618e9..5a5a7c672 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -330,7 +330,7 @@ overrides: brace-expansion@2: ^2.1.2 brace-expansion@>=3.0.0 <5.0.7: '>=5.0.7' mdast-util-to-hast: ^13.2.1 - js-yaml: ^3.15.0 + js-yaml: ^5.0.0 dompurify: ^3.4.13 qs: '>=6.15.2' minimatch@>=3.0.0 <3.1.4: 3.1.5 @@ -497,7 +497,7 @@ importers: version: 5.109.2(@swc/core@1.15.47(@swc/helpers@0.5.17))(csso@5.0.5)(esbuild@0.28.1)(lightningcss@1.33.0)(postcss@8.5.14)(webpack-cli@7.2.2) webpack-cli: specifier: catalog:tooling - version: 7.2.2(js-yaml@3.15.0)(json5@2.2.3)(webpack@5.109.2) + version: 7.2.2(js-yaml@5.3.0)(json5@2.2.3)(webpack@5.109.2) apps/docs: dependencies: @@ -651,7 +651,7 @@ importers: version: 5.109.2(@swc/core@1.15.47(@swc/helpers@0.5.17))(csso@5.0.5)(esbuild@0.28.1)(lightningcss@1.33.0)(postcss@8.5.14)(webpack-cli@7.2.2) webpack-cli: specifier: catalog:tooling - version: 7.2.2(js-yaml@3.15.0)(json5@2.2.3)(webpack@5.109.2) + version: 7.2.2(js-yaml@5.3.0)(json5@2.2.3)(webpack@5.109.2) packages/color-tokens: dependencies: @@ -4325,12 +4325,6 @@ packages: '@types/react-dom': optional: true - '@testing-library/user-event@14.6.3': - resolution: {integrity: sha512-6dBq67jT8lE+JTE8Exm02Kt6ze43hz1jdiSpSJwtTZiT1xQQ6b7nZYTTQ9njdArdU8XklOwaDp/AbT/eYSKF4g==} - engines: {node: '>=12', npm: '>=6'} - peerDependencies: - '@testing-library/dom': '>=7.21.4' - '@testing-library/user-event@14.6.4': resolution: {integrity: sha512-QCGwP6QrjypBLwyj5cuyfVamkaIEy/XGY+1VDehbtbQqOggYmTFpFOdWR5mPz14vX8vXLMVjDHlRNBcClyO9ew==} engines: {node: '>=12', npm: '>=6'} @@ -5115,6 +5109,9 @@ packages: argparse@1.0.10: resolution: {integrity: sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==} + argparse@2.0.1: + resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==} + aria-hidden@1.2.6: resolution: {integrity: sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==} engines: {node: '>=10'} @@ -6746,8 +6743,8 @@ packages: js-tokens@4.0.0: resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==} - js-yaml@3.15.0: - resolution: {integrity: sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==} + js-yaml@5.3.0: + resolution: {integrity: sha512-muutsYr+e2+d3rTgUGslq5rxbBlUy3cJ61IsHag2QNDQV+7zXWjkUpmALIajhrlLlrgRUiymj6U3zUr/TMK84Q==} hasBin: true jsdom@29.0.1: @@ -9187,7 +9184,7 @@ packages: engines: {node: '>=20.9.0'} hasBin: true peerDependencies: - js-yaml: ^3.15.0 + js-yaml: ^5.0.0 json5: ^2.2.3 toml: ^3.0.0 || ^4.0.0 webpack: ^5.101.0 @@ -9905,7 +9902,7 @@ snapshots: '@changesets/parse@0.4.3': dependencies: '@changesets/types': 6.1.0 - js-yaml: 3.15.0 + js-yaml: 5.3.0 '@changesets/pre@2.0.2': dependencies: @@ -14658,10 +14655,6 @@ snapshots: '@types/react': 19.2.18 '@types/react-dom': 19.2.4(@types/react@19.2.18) - '@testing-library/user-event@14.6.3(@testing-library/dom@10.4.1)': - dependencies: - '@testing-library/dom': 10.4.1 - '@testing-library/user-event@14.6.4(@testing-library/dom@10.4.1)': dependencies: '@testing-library/dom': 10.4.1 @@ -15032,7 +15025,7 @@ snapshots: sirv: 3.0.2 tinyrainbow: 3.1.0 vitest: 4.1.10(@types/node@24.13.3)(@vitest/browser-playwright@4.1.10)(@vitest/coverage-v8@4.1.10)(jsdom@29.0.1)(vite@8.2.1(@types/node@24.13.3)(esbuild@0.28.1)(terser@5.44.0)(tsx@4.23.12)(yaml@2.8.3)) - ws: 8.21.0 + ws: 8.21.1 transitivePeerDependencies: - bufferutil - msw @@ -15871,6 +15864,9 @@ snapshots: argparse@1.0.10: dependencies: sprintf-js: 1.0.3 + optional: true + + argparse@2.0.1: {} aria-hidden@1.2.6: dependencies: @@ -16276,7 +16272,7 @@ snapshots: cosmiconfig@8.3.6(typescript@5.9.3): dependencies: import-fresh: 3.3.1 - js-yaml: 3.15.0 + js-yaml: 5.3.0 parse-json: 5.2.0 path-type: 4.0.0 optionalDependencies: @@ -17120,7 +17116,7 @@ snapshots: gray-matter@4.0.3: dependencies: - js-yaml: 3.15.0 + js-yaml: 5.3.0 kind-of: 6.0.3 section-matter: 1.0.0 strip-bom-string: 1.0.0 @@ -17501,10 +17497,9 @@ snapshots: js-tokens@4.0.0: {} - js-yaml@3.15.0: + js-yaml@5.3.0: dependencies: - argparse: 1.0.10 - esprima: 4.0.1 + argparse: 2.0.1 jsdom@29.0.1: dependencies: @@ -19118,7 +19113,7 @@ snapshots: read-yaml-file@1.1.0: dependencies: graceful-fs: 4.2.11 - js-yaml: 3.15.0 + js-yaml: 5.3.0 pify: 4.0.1 strip-bom: 3.0.0 @@ -19704,7 +19699,8 @@ snapshots: cross-spawn: 7.0.6 signal-exit: 4.1.0 - sprintf-js@1.0.3: {} + sprintf-js@1.0.3: + optional: true sprintf-js@1.1.3: {} @@ -19768,7 +19764,7 @@ snapshots: '@storybook/icons': 2.0.2(react-dom@19.2.0(react@19.2.0))(react@19.2.0) '@testing-library/dom': 10.4.1 '@testing-library/jest-dom': 6.9.1 - '@testing-library/user-event': 14.6.3(@testing-library/dom@10.4.1) + '@testing-library/user-event': 14.6.4(@testing-library/dom@10.4.1) '@vitest/expect': 3.2.4 '@vitest/spy': 3.2.4 '@webcontainer/env': 1.1.1 @@ -20436,7 +20432,7 @@ snapshots: webidl-conversions@8.0.1: {} - webpack-cli@7.2.2(js-yaml@3.15.0)(json5@2.2.3)(webpack@5.109.2): + webpack-cli@7.2.2(js-yaml@5.3.0)(json5@2.2.3)(webpack@5.109.2): dependencies: '@discoveryjs/json-ext': 1.1.0 commander: 14.0.3 @@ -20448,7 +20444,7 @@ snapshots: webpack: 5.109.2(@swc/core@1.15.47(@swc/helpers@0.5.17))(csso@5.0.5)(esbuild@0.28.1)(lightningcss@1.33.0)(postcss@8.5.14)(webpack-cli@7.2.2) webpack-merge: 6.0.1 optionalDependencies: - js-yaml: 3.15.0 + js-yaml: 5.3.0 json5: 2.2.3 webpack-merge@6.0.1: @@ -20484,7 +20480,7 @@ snapshots: watchpack: 2.5.2 webpack-sources: 3.5.1 optionalDependencies: - webpack-cli: 7.2.2(js-yaml@3.15.0)(json5@2.2.3)(webpack@5.109.2) + webpack-cli: 7.2.2(js-yaml@5.3.0)(json5@2.2.3)(webpack@5.109.2) transitivePeerDependencies: - '@minify-html/node' - '@swc/core' diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 522d9dcce..d5d4b4a15 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -99,7 +99,7 @@ overrides: mdast-util-to-hast: "^13.2.1" # js-yaml 3.x security floor — >=3.15.0 fixes GHSA-h67p-54hq-rp68 # (quadratic-complexity DoS in merge-key handling). - js-yaml: "^3.15.0" + js-yaml: "^5.0.0" # Force the transitively-pulled dompurify (3.4.5 via @commercetools-uikit/icons # + rich-text-utils) up to the vetted catalog version, clearing the dompurify # GHSA cluster (…-cmwh-pvxp-8882, …-rp9w-3fw7-7cwq, …-76mc-f452-cxcm, etc.).