Skip to content

Bump js-yaml from 4.1.0 to 4.1.1#397

Open
renovate-pagopa[bot] wants to merge 1 commit intodevelopfrom
renovate/js-yaml-to-4.1.1
Open

Bump js-yaml from 4.1.0 to 4.1.1#397
renovate-pagopa[bot] wants to merge 1 commit intodevelopfrom
renovate/js-yaml-to-4.1.1

Conversation

@renovate-pagopa
Copy link
Contributor

This PR contains the following updates:

Package Change Age Confidence
js-yaml 4.1.0 -> 4.1.1 age confidence

For further information on security, please refer to the Confluence page link


Release Notes

nodeca/js-yaml (js-yaml)

v4.1.1

Compare Source

Security
  • Fix prototype pollution issue in yaml merge (<<) operator.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@renovate-pagopa renovate-pagopa bot requested a review from a team as a code owner January 19, 2026 05:12
@renovate-pagopa renovate-pagopa bot added the OER label Jan 19, 2026
@renovate-pagopa renovate-pagopa bot requested a review from a team as a code owner January 19, 2026 05:12
@renovate-pagopa renovate-pagopa bot force-pushed the renovate/js-yaml-to-4.1.1 branch 4 times, most recently from 73a7848 to b7bb41a Compare January 28, 2026 05:06
@renovate-pagopa renovate-pagopa bot force-pushed the renovate/js-yaml-to-4.1.1 branch 3 times, most recently from 0401f32 to 29808bc Compare February 3, 2026 05:39
@renovate-pagopa renovate-pagopa bot force-pushed the renovate/js-yaml-to-4.1.1 branch 2 times, most recently from 2b34706 to 64fe041 Compare February 12, 2026 05:53
@renovate-pagopa renovate-pagopa bot force-pushed the renovate/js-yaml-to-4.1.1 branch from 64fe041 to 6fd0e49 Compare February 13, 2026 05:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants