Visitar URL original
DPDB: Bump js-yaml from 5.4.2 to 5.5.0 in /sandbox in the all-dependencies group across 1 directory by dependabot[bot] · Pull Request #411 · NHSDigital/nhs-app-api · GitHub
Skip to content

DPDB: Bump js-yaml from 5.4.2 to 5.5.0 in /sandbox in the all-dependencies group across 1 directory - #411

Merged
glensmith10 merged 2 commits into
masterfrom
dependabot/npm_and_yarn/sandbox/all-dependencies-94f6d3737a
Oct 30, 2026
Merged

glensmith10 merged 2 commits into
masterfrom
dependabot/npm_and_yarn/sandbox/all-dependencies-94f6d3737a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 1 update in the /sandbox directory: js-yaml.

Updates js-yaml from 5.4.2 to 5.5.0

Changelog

Sourced from js-yaml's changelog.

[5.5.0] - 2026-10-16

Changed

  • Updated argparse to v3.
  • Updated development dependencies.

Fixed

  • Correct percent-encoding of shorthand and verbatim tags.
  • Reject ,, ], and } at the start of block plain scalars, #801.
  • Report the exact position of non-printable characters in errors, #801.

[5.4.3] - 2026-10-06

Fixed

  • Fixed loading a whitespace-only block scalar followed by a less indented line, #802.
Commits
  • cb62b2d 5.5.0 released
  • 87aed90 Deps bump
  • 3aec511 Fix error positions for non-printable characters, #801
  • 11aa483 Reject flow indicators at the start of block plain scalars, #801
  • 339d8e0 Refactor tag encoder and decoder to match the YAML specification
  • 7832624 5.4.3 released
  • 0cbb471 Fix whitespace-only block scalar followed by a less indented line, close #802
  • 30108cc Parse the first block mapping key once (#800)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 14, 2026
@dependabot dependabot Bot changed the title DPDB: Bump js-yaml from 5.4.2 to 5.4.3 in /sandbox in the all-dependencies group DPDB: Bump js-yaml from 5.4.2 to 5.5.0 in /sandbox in the all-dependencies group across 1 directory Oct 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/sandbox/all-dependencies-94f6d3737a branch 2 times, most recently from eb4d1e5 to 43e677a Compare October 30, 2026 10:29
Bumps the all-dependencies group with 1 update in the /sandbox directory: [js-yaml](https://github.com/nodeca/js-yaml).


Updates `js-yaml` from 5.4.2 to 5.5.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.2...5.5.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/sandbox/all-dependencies-94f6d3737a branch from 43e677a to a0ce64d Compare October 30, 2026 10:35
@sonarqubecloud

Copy link
Copy Markdown

@glensmith10
glensmith10 merged commit f44da6e into master Oct 30, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant