chore(deps): Update dependency js-yaml to v4 [SECURITY]

renovate[bot] · web-flow · commit 7c825ccd44c5 · 2025-11-14T20:14:16.000Z
diff --git a/packages/brick-container/package.json b/packages/brick-container/package.json
@@ -43,7 +43,7 @@
     "express": "^4.21.2",
     "glob": "^8.1.0",
     "http-proxy-middleware": "^3.0.3",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "lodash": "^4.17.21",
     "meow": "^11.0.0",
     "mockdate": "^3.0.5",
diff --git a/packages/create-api-sdk/package.json b/packages/create-api-sdk/package.json
@@ -46,7 +46,7 @@
     "change-case": "^4.1.2",
     "fs-extra": "^10.1.0",
     "inquirer": "^8.2.6",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "klaw-sync": "^6.0.0",
     "meow": "^9.0.0",
     "prettier": "^3.6.2",
diff --git a/packages/doc-helpers/package.json b/packages/doc-helpers/package.json
@@ -29,7 +29,7 @@
   "dependencies": {
     "@next-core/brick-manifest": "^0.7.2",
     "fast-xml-parser": "^5.2.5",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "prettier": "^3.6.2"
   }
 }
diff --git a/packages/easyops-runtime/package.json b/packages/easyops-runtime/package.json
@@ -52,7 +52,7 @@
     "@next-core/runtime": "^1.65.7",
     "@next-core/types": "^1.17.0",
     "@next-core/utils": "^1.8.4",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "lodash": "^4.17.21"
   },
   "devDependencies": {
diff --git a/packages/pipes/package.json b/packages/pipes/package.json
@@ -40,7 +40,7 @@
   "sideEffects": false,
   "dependencies": {
     "@easyops-cn/brick-next-pipes": "^0.7.3",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "lodash": "^4.17.21",
     "moment": "^2.30.1"
   },
diff --git a/packages/preview/package.json b/packages/preview/package.json
@@ -32,6 +32,6 @@
     "@next-core/theme": "^1.6.0",
     "@next-core/types": "^1.17.0",
     "html-webpack-plugin": "^5.6.3",
-    "js-yaml": "^3.14.1"
+    "js-yaml": "^4.0.0"
   }
 }
diff --git a/yarn.lock b/yarn.lock
@@ -9023,21 +9023,28 @@ jju@~1.4.0:
   version "4.0.0"
   resolved "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
 
-js-yaml@4.1.0, js-yaml@^4.1.0:
+js-yaml@4.1.0:
   version "4.1.0"
   resolved "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz"
   integrity sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==
   dependencies:
     argparse "^2.0.1"
 
-js-yaml@^3.10.0, js-yaml@^3.13.1, js-yaml@^3.14.1:
+js-yaml@^3.10.0, js-yaml@^3.13.1:
   version "3.14.1"
   resolved "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
   integrity sha1-2ugS/bOCX6MGYJqHFzg8UMNqBTc=
   dependencies:
     argparse "^1.0.7"
     esprima "^4.0.0"
 
+js-yaml@^4.0.0, js-yaml@^4.1.0:
+  version "4.1.1"
+  resolved "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz#854c292467705b699476e1a2decc0c8a3458806b"
+  integrity sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==
+  dependencies:
+    argparse "^2.0.1"
+
 jsbn@~0.1.0:
   version "0.1.1"
   resolved "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"

Original file line number	Diff line number	Diff line change
`@@ -29,7 +29,7 @@`
`29`	`29`	`"dependencies": {`
`30`	`30`	`"@next-core/brick-manifest": "^0.7.2",`
`31`	`31`	`"fast-xml-parser": "^5.2.5",`
`32`		`- "js-yaml": "^3.14.1",`
	`32`	`+ "js-yaml": "^4.0.0",`
`33`	`33`	`"prettier": "^3.6.2"`
`34`	`34`	`}`
`35`	`35`	`}`
Original file line number	Diff line number	Diff line change
`@@ -32,6 +32,6 @@`
`32`	`32`	`"@next-core/theme": "^1.6.0",`
`33`	`33`	`"@next-core/types": "^1.17.0",`
`34`	`34`	`"html-webpack-plugin": "^5.6.3",`
`35`		`- "js-yaml": "^3.14.1"`
	`35`	`+ "js-yaml": "^4.0.0"`
`36`	`36`	`}`
`37`	`37`	`}`