Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 31, 2025

Bumps yaml from 2.6.0 to 2.7.1.

Release notes

Sourced from yaml's releases.

v2.7.1

  • Do not allow seq with single-line collection value on same line with map key (#603)
  • Improve warning & avoid TypeError on bad YAML 1.1 nodes (#610)

v2.7.0

The library is now available on JSR as @​eemeli/yaml and on deno.land/x as yaml. In addition to Node.js and browsers, it should work in Deno, Bun, and Cloudflare Workers.

  • Use .ts extension in all relative imports (#591)
  • Ignore newline after block seq indicator as space before value (#590)
  • Require Node.js 14.18 or later (was 14.6) (#598)

v2.6.1

  • Do not strip :00 seconds from !!timestamp values (#578, with thanks to @​qraynaud)
  • Tighten regexp for JSON !!bool (#587, with thanks to @​vra5107)
  • Default to literal block scalar if folded would overflow (#585)
Commits
  • a141bc0 2.7.1
  • a880b42 fix: Do not allow seq with single-line collection value on same line with map...
  • 923d67b test: Add test for tab after indent spaces for flow-in-block (#604)
  • 7cf843c test: Add descriptive names to tests with issue references
  • 9cf06d2 fix: Improve warning & avoid TypeError on bad YAML 1.1 nodes (fixes #610)
  • 50cf76b chore: Update docs-slate to skip its CI tests
  • 3b2362a docs: Add install option deno add jsr:@eemeli/yaml
  • 83cb780 chore: Update docs to use Slate 2.13.1
  • 9b02456 chore: Fix JSR version
  • 8f512b5 2.7.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [yaml](https://github.com/eemeli/yaml) from 2.6.0 to 2.7.1.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.6.0...v2.7.1)

---
updated-dependencies:
- dependency-name: yaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 31, 2025
@dependabot dependabot bot requested a review from ncalteen as a code owner March 31, 2025 06:04
@github-actions
Copy link

🦙 MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 8 0 0 0.05s
✅ JSON jsonlint 7 0 0 0.25s
✅ JSON npm-package-json-lint yes no no 0.72s
✅ JSON prettier 7 0 0 1.39s
✅ MARKDOWN markdownlint 1 0 0 1.57s
✅ REPOSITORY checkov yes no no 21.38s
✅ REPOSITORY gitleaks yes no no 0.13s
✅ REPOSITORY git_diff yes no no 0.07s
✅ REPOSITORY grype yes no no 38.38s
✅ REPOSITORY syft yes no no 8.52s
❌ REPOSITORY trivy yes 1 no 12.8s
✅ REPOSITORY trivy-sbom yes no no 0.71s
✅ REPOSITORY trufflehog yes no no 19.37s
✅ TYPESCRIPT eslint 24 0 0 9.13s
✅ TYPESCRIPT prettier 24 0 0 2.07s
✅ YAML prettier 16 0 0 0.75s
✅ YAML yamllint 16 0 0 0.5s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by OX Security

@ncalteen
Copy link
Contributor

@dependabot rebase

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 31, 2025

Looks like yaml is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Mar 31, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/yaml-2.7.1 branch March 31, 2025 14:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants