Skip to content

Bump js-yaml from 5.2.1 to 5.2.2 in /extensions/ql-vscode - #4479

Merged
nickrolfe merged 1 commit into
mainfrom
dependabot/npm_and_yarn/extensions/ql-vscode/js-yaml-5.2.2
Jul 29, 2026
Merged

Bump js-yaml from 5.2.1 to 5.2.2 in /extensions/ql-vscode#4479
nickrolfe merged 1 commit into
mainfrom
dependabot/npm_and_yarn/extensions/ql-vscode/js-yaml-5.2.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 5.2.1 to 5.2.2.

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.
Commits
  • 3c29559 5.2.2 released
  • 3e5240f parser: avoid reparsing flow sequence pair keys
  • bd7ebb2 fix: quote flow scalars where a colon precedes a flow indicator (#773)
  • See full diff in compare view

@dependabot dependabot Bot added the Update dependencies Dependabot update PRs label Jul 25, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 25, 2026 00:39
@dependabot dependabot Bot added the Update dependencies Dependabot update PRs label Jul 25, 2026
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.1 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.1...5.2.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/extensions/ql-vscode/js-yaml-5.2.2 branch from 43d1a51 to 85d3007 Compare July 29, 2026 09:12
@nickrolfe
nickrolfe enabled auto-merge July 29, 2026 09:23
@nickrolfe
nickrolfe merged commit ddd42a0 into main Jul 29, 2026
17 checks passed
@nickrolfe
nickrolfe deleted the dependabot/npm_and_yarn/extensions/ql-vscode/js-yaml-5.2.2 branch July 29, 2026 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Update dependencies Dependabot update PRs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant