Skip to content

Bump yaml from 2.7.0 to 2.8.1 #129

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from

Bump yaml from 2.7.0 to 2.8.1

96d343e
Select commit
Loading
Failed to load commit list.
Open

Bump yaml from 2.7.0 to 2.8.1 #129

Bump yaml from 2.7.0 to 2.8.1
96d343e
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security Int / Step Security PR Runtime Required Checks succeeded Aug 28, 2025 in 2s

Step Security PR Runtime Required Checks

Finished Step Security PR Runtime Required Checks

  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers

Details

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
yaml 2.7.0 2.8.1 yarn.lock 2025-08-05T13:19:28Z
⏲️ History

Previous invokation results of same check:

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Recent Release Guard Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
yaml 2.7.0 2.8.1 yarn.lock 2025-08-05T13:19:28Z
⏲️ History

Previous invokation results of same check:

View more details on StepSecurity Actions Security Int