From b4b66f03827690de422f4bde1af940a88629dcfc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Javi=20Mart=C3=ADn?= Date: Mon, 17 Nov 2025 17:26:38 +0100 Subject: [PATCH] Bump js-yaml from 4.1.0 to 4.1.1 We're getting a Dependabot alert because of this [1], but currently Dependabot is unable to open the pull request fixing it [2]. Code generated by running `npm audit fix`. [1] https://github.com/advisories/GHSA-mh29-5h37-fv8m [2] Issue 13551 in https://github.com/dependabot/dependabot-core --- package-lock.json | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 83fbd3cd1..c22e9c80f 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1578,10 +1578,11 @@ "dev": true }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz", + "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==", "dev": true, + "license": "MIT", "dependencies": { "argparse": "^2.0.1" },