Skip to content

Bump js-yaml from 4.1.0 to 4.1.1#29

Merged
neetogit-bot[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-4.1.1
Apr 2, 2026
Merged

Bump js-yaml from 4.1.0 to 4.1.1#29
neetogit-bot[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-4.1.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Nov 16, 2025

Bumps js-yaml from 4.1.0 to 4.1.1.

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code patch labels Nov 16, 2025
@yedhink
Copy link
Copy Markdown
Contributor

yedhink commented Apr 2, 2026

@dependabot recreate

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.1.1 branch from fff0b02 to cb03ae6 Compare April 2, 2026 12:38
@neetogit-bot
Copy link
Copy Markdown

neetogit-bot Bot commented Apr 2, 2026

NeetoGit is monitoring this dependabot PR (js-yaml 4.1.0 → 4.1.1). Once CI completes, this PR will be auto-merged if all checks pass, or a reviewer will be assigned if CI fails.


This comment was auto-generated by NeetoGit.

@neetogit-bot neetogit-bot Bot added the mergepr label Apr 2, 2026
@neetogit-bot neetogit-bot Bot merged commit 5d45e7b into main Apr 2, 2026
1 check passed
@neetogit-bot neetogit-bot Bot deleted the dependabot/npm_and_yarn/js-yaml-4.1.1 branch April 2, 2026 12:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code mergepr patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant