Skip to content

chore(deps): update dependency js-yaml to v5.3.0 (beta) - #1538

Merged
renovate[bot] merged 1 commit into
betafrom
renovate/beta-js-yaml-5.x
Aug 17, 2026
Merged

chore(deps): update dependency js-yaml to v5.3.0 (beta)#1538
renovate[bot] merged 1 commit into
betafrom
renovate/beta-js-yaml-5.x

Conversation

@renovate

@renovaterenovateBot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageTypeUpdateChangeOpenSSF
js-yamldevDependenciesminor5.2.35.3.0OpenSSF Scorecard

Release Notes

nodeca/js-yaml (js-yaml)

v5.3.0

Compare Source

This release focuses on reworking the documentation and making small
architectural improvements before moving forward.

Added
  • Added completely new documentation.
  • Exported DUMP_SCHEMA, the default schema used by the dumper.
  • Added YAMLException.throwAt() for throwing an error at a source position.
Changed
  • Changed flat constant exports to grouped exports: EVENT_ID, SCALAR_STYLE,
    COLLECTION_STYLE, and CHOMPING_MODE, along with their value types. The old
    exports are still preserved, but deprecated.
  • Made identify mandatory for custom tag definitions. Use
    identify: () => false for load-only tags.
Deprecated
  • Deprecated flat constant exports. Use grouped ones instead.
Removed
  • Removed the MERGE_KEY export (not used anymore after last fixes).
Fixed
  • Validate << sequence items at merge time, so aliased merge sources are
    checked too.
  • Resolve << outside of a mapping key as the plain string '<<', matching
    v4, instead of leaking an internal symbol into the result.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

DiffPackageSupply Chain
Security
VulnerabilityQualityMaintenanceLicense
Updatedjs-yaml@​5.2.3 ⏵ 5.3.010010087-1293100

View full report

@codecov

codecovBot commented Aug 17, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (040c205) to head (cb01ed6).

Additional details and impacted files

Impacted file tree graph

@@ Coverage Diff @@## beta #1538 +/- ##
=========================================
Coverage 100.00% 100.00% =========================================
Files 108 108 Lines 365 365 =========================================
Hits 365 365 
FlagCoverage Δ
unit100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate
renovateBot merged commit e59b512 into betaAug 17, 2026
15 checks passed
@renovate
renovateBot deleted the renovate/beta-js-yaml-5.x branch August 17, 2026 10:02
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants