Merge pull request #62 from pkgjs/renovate/js-yaml-4.x

Author: dominykas

lib/travis/imports.js

@@ -88,7 +88,7 @@ exports.apply = async (yaml, { loadFile, relativeTo, breadcrumb = ['.travis.yml'
 
         const buffer = await internals.loadSource(entry.source, { loadFile });
 
-        const imported = Yaml.safeLoad(buffer, {
+        const imported = Yaml.load(buffer, {
             schema: Yaml.FAILSAFE_SCHEMA,
             json: true
         });

lib/travis/index.js

@@ -86,7 +86,7 @@ exports.detect = async ({ loadFile }) => {
         throw err;
     }
 
-    const travisYaml = Yaml.safeLoad(buffer, {
+    const travisYaml = Yaml.load(buffer, {
         schema: Yaml.FAILSAFE_SCHEMA,
         json: true
     });

package.json

@@ -40,7 +40,7 @@
     "@pkgjs/nv": "0.1.0",
     "debug": "^4.1.1",
     "git-url-parse": "^11.1.2",
-    "js-yaml": "^3.13.1",
+    "js-yaml": "^4.0.0",
     "minimist": "^1.2.5",
     "pacote": "^11.1.0",
     "simple-git": "^2.13.1",