Skip to content

fix(deps): update dependency js-yaml to ^5.2.3 - #417

Merged
github-actions[bot] merged 1 commit into
mainfrom
renovate/js-yaml-5.2.x
Aug 4, 2026
Merged

fix(deps): update dependency js-yaml to ^5.2.3#417
github-actions[bot] merged 1 commit into
mainfrom
renovate/js-yaml-5.2.x

Conversation

@renovate

@renovate renovate Bot commented Aug 2, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
js-yaml ^5.2.2^5.2.3 age confidence

Release Notes

nodeca/js-yaml (js-yaml)

v5.2.3

Compare Source

Fixed
  • Prevent prototype fallback when resolving tags and mapping entries, #​782.
  • Resolve !!timestamp years 0000-0099 correctly, #​775.
  • Preserve implicit null mapping values before document markers and reject
    unpaired mapping event streams, #​784.
  • Preserve folded scalar values with tab-indented lines when round-tripping a
    parsed AST through present(); dump() and loading are unaffected, #​780.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label Aug 2, 2026
@renovate
renovate Bot requested a review from a team as a code owner August 2, 2026 05:04
@renovate
renovate Bot requested review from cdmren and removed request for a team August 2, 2026 05:04
@renovate renovate Bot added the renovate label Aug 2, 2026
cdmren added a commit that referenced this pull request Aug 4, 2026
ts-jest (latest 29.4.12) requires typescript <7, which is what's
breaking the build check on main and every PR rebased onto it (see
#407, #417). This is a third angle on the same fix (alongside #418
and #419): move off Node/yarn/jest entirely in favor of bun, whose
built-in test runner transpiles TS itself and has no such constraint,
so typescript stays on ^7.0.2.

- Replace yarn.lock with bun.lock; drop .nvmrc in favor of
  .bun-version
- Drop jest/ts-jest/@types/jest; add @types/bun for bun:test's types
- package.json test script: "bun test"
- Test files: swap @jest/globals imports for bun:test's native
  mock/spyOn, and add explicit beforeEach(() => mock.clearAllMocks())
  where mocks carry state across tests, since bun doesn't have jest's
  resetMocks/vitest's mockReset config equivalent
- with-cache.test.ts: expect(async () => {...}).rejects.toThrow()
  doesn't work under bun (it requires an actual Promise, not a
  function reference, unlike jest/vitest which auto-invoke); changed
  to pass the invoked promise directly
- CI/example/release workflows: swap actions/setup-node + yarn for
  oven-sh/setup-bun + bun
- .releaserc.yaml: prepareCmd now runs bun instead of yarn

Verified locally: bun install, bun test (44/44 across 8 files), and
bun run build (tsc + ncc) all pass.
@github-actions
github-actions Bot enabled auto-merge (rebase) August 4, 2026 16:41
@renovate
renovate Bot force-pushed the renovate/js-yaml-5.2.x branch from 1cde530 to ffe8fe7 Compare August 4, 2026 16:43
@github-actions
github-actions Bot merged commit b6b1951 into main Aug 4, 2026
21 of 28 checks passed
@github-actions
github-actions Bot deleted the renovate/js-yaml-5.2.x branch August 4, 2026 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants