Skip to content

fix: bump js-yaml from 4.3.0 to 4.3.1 in the npm_and_yarn group across 1 directory - #491

Merged
hongyi-chen merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-60ab56c091
Aug 9, 2026
Merged

fix: bump js-yaml from 4.3.0 to 4.3.1 in the npm_and_yarn group across 1 directory#491
hongyi-chen merged 2 commits into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-60ab56c091

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the / directory: js-yaml.

Updates js-yaml from 4.3.0 to 4.3.1

Changelog

Sourced from js-yaml's changelog.

4.3.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml).


Updates `js-yaml` from 4.3.0 to 4.3.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...4.3.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2026
@vercel

vercel Bot commented Aug 7, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs Ready Ready Preview Aug 9, 2026 6:42pm

Request Review

@cla-bot cla-bot Bot added the cla-signed label Aug 7, 2026
@oz-for-oss

oz-for-oss Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

@dependabot[bot]

I'm starting a first review of this pull request.

You can view the conversation on Warp.

I completed the review and no human review was requested for this pull request.

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz

@oz-for-oss oz-for-oss Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Overview

This PR bumps js-yaml from 4.3.0 to 4.3.1 in the package override and updates the corresponding package-lock.json resolved version and integrity metadata.

Concerns

  • No blocking correctness, security, or spec-alignment concerns found. The available spec context states that no approved or repository spec context was found for this PR.

Verdict

Found: 0 critical, 0 important, 0 suggestions

Approve

Comment /oz-review on this pull request to retrigger a review (up to 3 times on the same pull request).

Powered by Oz

@hongyi-chen
hongyi-chen merged commit ced5015 into main Aug 9, 2026
6 of 7 checks passed
@hongyi-chen
hongyi-chen deleted the dependabot/npm_and_yarn/npm_and_yarn-60ab56c091 branch August 9, 2026 18:39
rachaelrenk added a commit that referenced this pull request Aug 10, 2026
Picks up #495 (weekly release updates), #491 (js-yaml bump), and #497
(AEO cross-links for agents and orchestration).

#497 added a link to /cli/cloud-and-orchestration/ from
agents/cli-agents/overview.mdx. That is the third time main has added a
link into the path this PR is moving, after #459 and the original set.
Repointed to /agents/cli/cloud-and-orchestration/.

CI caught this one rather than my local run, because a pull_request build
checks the branch merged with main while my local tree had not yet merged
these commits. Local now checks the same 3,482 internal links CI does,
with 0 broken.

Also fixed a flaw in my own verification: the grep I had been using to find
stale /cli links excluded matches with `grep -v /agents/cli`, which
filtered on the file path rather than the link target. Any stale link
inside agents/cli-agents/ was therefore invisible to it, which is exactly
where this one lived. Now matching on the link text itself.

Validation on the merged tree: build 364 pages, typecheck 0 errors,
0 broken internal links across 3,482.

Co-Authored-By: Warp Agent <agent@warp.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant