Sandbox::https://github.com/docker/setup-buildx-action/pull/608

dependabot · 2026-08-31T04:43:57Z

Bumps js-yaml from 5.3.0 to 5.4.1.

Changelog

[5.4.1] - 2026-08-26

Changed

Hard-limit merge sequence size to 100.

Security

Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

[breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.

[breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.

Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

Accept a byte order mark at the start of each document in a stream, #791.

Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.

Preserve empty scalar items when converting block sequences to flow style.

Do not apply the 1024-character simple-key limit to flow mapping keys.

Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.

Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

Commits

e5a3ba0 5.4.1 released
e54dea3 Hard-limit merge sequence size to 100
dfd3a29 Cleanup 6a8e05f, #797
6a8e05f fix: count empty merge sources against maxTotalMergeKeys (#797)
6b4ff5e 5.4.0 released
3b3625e Update changelog
4f25a74 Fix file name
3bd003b Expose new scalar styling API
fbb3e9d Remove regex lookbehind for ES2015 compatibility
d43c185 Fix flowSkipColonSpace by forcing quoteFlowKeys
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.3.0 to 5.4.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.3.0...5.4.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.4.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

@crazy-max

@crazy-max

@crazy-max

@crazy-max

@crazy-max

…ion to v4 (#9) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | action | major | `v3` → `v4` | --- ### Release Notes <details> <summary>docker/setup-buildx-action (https://github.com/docker/setup-buildx-action)</summary> ### [`v4.4.1`](https://github.com/docker/setup-buildx-action/releases/tag/v4.4.1) [Compare Source](docker/setup-buildx-action@v4.4.0...v4.4.1) - Skip BuildKit image pre-pulls for explicit endpoints by [@crazy-max](https://github.com/crazy-max) in [#624](docker/setup-buildx-action#624) **Full Changelog**: <docker/setup-buildx-action@v4.4.0...v4.4.1> ### [`v4.4.0`](https://github.com/docker/setup-buildx-action/releases/tag/v4.4.0) [Compare Source](docker/setup-buildx-action@v4.3.0...v4.4.0) - Use official Buildx releases for cloud driver by [@crazy-max](https://github.com/crazy-max) in [#606](docker/setup-buildx-action#606) - Pull BuildKit image before builder creation by [@crazy-max](https://github.com/crazy-max) in [#609](docker/setup-buildx-action#609) - Use shared error helpers for Buildx and Docker commands by [@crazy-max](https://github.com/crazy-max) in [#620](docker/setup-buildx-action#620) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.95.0 to 0.100.0 in [#610](docker/setup-buildx-action#610) [#618](docker/setup-buildx-action#618) [#619](docker/setup-buildx-action#619) - Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#614](docker/setup-buildx-action#614) - Bump js-yaml from 5.3.0 to 5.4.2 in [#608](docker/setup-buildx-action#608) [#617](docker/setup-buildx-action#617) - Bump postcss-selector-parser from 7.1.1 to 7.1.5 in [#611](docker/setup-buildx-action#611) **Full Changelog**: <docker/setup-buildx-action@v4.3.0...v4.4.0> ### [`v4.3.0`](https://github.com/docker/setup-buildx-action/releases/tag/v4.3.0) [Compare Source](docker/setup-buildx-action@v4.2.0...v4.3.0) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.95.0 in [#595](docker/setup-buildx-action#595) - Bump brace-expansion from 1.1.13 to 1.1.18 in [#600](docker/setup-buildx-action#600) - Bump js-yaml from 5.2.0 to 5.3.0 in [#585](docker/setup-buildx-action#585) - Bump postcss from 8.5.10 to 8.5.25 in [#598](docker/setup-buildx-action#598) - Bump undici from 6.27.0 to 6.28.0 in [#601](docker/setup-buildx-action#601) **Full Changelog**: <docker/setup-buildx-action@v4.2.0...v4.3.0> ### [`v4.2.0`](https://github.com/docker/setup-buildx-action/releases/tag/v4.2.0) [Compare Source](docker/setup-buildx-action@v4.1.0...v4.2.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#572](docker/setup-buildx-action#572) - Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#551](docker/setup-buildx-action#551) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#557](docker/setup-buildx-action#557) [#580](docker/setup-buildx-action#580) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#573](docker/setup-buildx-action#573) - Bump [@sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#576](docker/setup-buildx-action#576) - Bump js-yaml from 4.1.1 to 5.2.0 in [#562](docker/setup-buildx-action#562) - Bump sigstore from 4.1.0 to 4.1.1 in [#577](docker/setup-buildx-action#577) - Bump tmp from 0.2.5 to 0.2.7 in [#556](docker/setup-buildx-action#556) - Bump undici from 6.25.0 to 6.27.0 in [#570](docker/setup-buildx-action#570) - Bump vite from 7.3.2 to 7.3.6 in [#569](docker/setup-buildx-action#569) **Full Changelog**: <docker/setup-buildx-action@v4.1.0...v4.2.0> ### [`v4.1.0`](https://github.com/docker/setup-buildx-action/releases/tag/v4.1.0) [Compare Source](docker/setup-buildx-action@v4.0.0...v4.1.0) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#489](docker/setup-buildx-action#489) - Bump brace-expansion from 1.1.12 to 5.0.6 in [#547](docker/setup-buildx-action#547) [#508](docker/setup-buildx-action#508) - Bump fast-xml-builder from 1.0.0 to 1.2.0 in [#540](docker/setup-buildx-action#540) - Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#496](docker/setup-buildx-action#496) - Bump flatted from 3.3.3 to 3.4.2 in [#499](docker/setup-buildx-action#499) - Bump glob from 10.3.12 to 13.0.6 in [#495](docker/setup-buildx-action#495) - Bump handlebars from 4.7.8 to 4.7.9 in [#504](docker/setup-buildx-action#504) - Bump lodash from 4.17.23 to 4.18.1 in [#523](docker/setup-buildx-action#523) - Bump picomatch from 4.0.3 to 4.0.4 in [#503](docker/setup-buildx-action#503) - Bump postcss from 8.5.6 to 8.5.10 in [#537](docker/setup-buildx-action#537) - Bump tar from 6.2.1 to 7.5.15 in [#545](docker/setup-buildx-action#545) - Bump undici from 6.23.0 to 6.25.0 in [#492](docker/setup-buildx-action#492) - Bump vite from 7.3.1 to 7.3.2 in [#520](docker/setup-buildx-action#520) **Full Changelog**: <docker/setup-buildx-action@v4.0.0...v4.1.0> ### [`v4.0.0`](https://github.com/docker/setup-buildx-action/releases/tag/v4.0.0) [Compare Source](docker/setup-buildx-action@v3.12.0...v4.0.0) - Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#483](docker/setup-buildx-action#483) - Remove deprecated inputs/outputs by [@crazy-max](https://github.com/crazy-max) in [#464](docker/setup-buildx-action#464) - Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#481](docker/setup-buildx-action#481) - Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#475](docker/setup-buildx-action#475) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.63.0 to 0.79.0 in [#482](docker/setup-buildx-action#482) [#485](docker/setup-buildx-action#485) - Bump js-yaml from 4.1.0 to 4.1.1 in [#452](docker/setup-buildx-action#452) - Bump lodash from 4.17.21 to 4.17.23 in [#472](docker/setup-buildx-action#472) - Bump minimatch from 3.1.2 to 3.1.5 in [#480](docker/setup-buildx-action#480) **Full Changelog**: <docker/setup-buildx-action@v3.12.0...v4.0.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Rome) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.homelab.devncode.it/marco/vinted-search-mcp/pulls/9

@crazy-max

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | action | minor | `v4.3.0` → `v4.4.1` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/775) for more information. --- ### Release Notes <details> <summary>docker/setup-buildx-action (docker/setup-buildx-action)</summary> ### [`v4.4.1`](https://github.com/docker/setup-buildx-action/releases/tag/v4.4.1) [Compare Source](docker/setup-buildx-action@v4.4.0...v4.4.1) - Skip BuildKit image pre-pulls for explicit endpoints by [@crazy-max](https://github.com/crazy-max) in [#624](docker/setup-buildx-action#624) **Full Changelog**: <docker/setup-buildx-action@v4.4.0...v4.4.1> ### [`v4.4.0`](https://github.com/docker/setup-buildx-action/releases/tag/v4.4.0) [Compare Source](docker/setup-buildx-action@v4.3.0...v4.4.0) - Use official Buildx releases for cloud driver by [@crazy-max](https://github.com/crazy-max) in [#606](docker/setup-buildx-action#606) - Pull BuildKit image before builder creation by [@crazy-max](https://github.com/crazy-max) in [#609](docker/setup-buildx-action#609) - Use shared error helpers for Buildx and Docker commands by [@crazy-max](https://github.com/crazy-max) in [#620](docker/setup-buildx-action#620) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.95.0 to 0.100.0 in [#610](docker/setup-buildx-action#610) [#618](docker/setup-buildx-action#618) [#619](docker/setup-buildx-action#619) - Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#614](docker/setup-buildx-action#614) - Bump js-yaml from 5.3.0 to 5.4.2 in [#608](docker/setup-buildx-action#608) [#617](docker/setup-buildx-action#617) - Bump postcss-selector-parser from 7.1.1 to 7.1.5 in [#611](docker/setup-buildx-action#611) **Full Changelog**: <docker/setup-buildx-action@v4.3.0...v4.4.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://codeberg.org/umati/Sample-Server/pulls/1778 Signed-off-by: umati-bot <git-bot@umati.org>

@crazy-max

@crazy-max

Bumps docker/setup-buildx-action from 3.12.0 to 4.4.1. ## Release notes Sourced from docker/setup-buildx-action's releases. v4.4.1 Skip BuildKit image pre-pulls for explicit endpoints by @crazy-max in docker/setup-buildx-action#624 Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1 v4.4.0 Use official Buildx releases for cloud driver by @crazy-max in docker/setup-buildx-action#606 Pull BuildKit image before builder creation by @crazy-max in docker/setup-buildx-action#609 Use shared error helpers for Buildx and Docker commands by @crazy-max in docker/setup-buildx-action#620 Bump @docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619 Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614 Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617 Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611 Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0 v4.3.0 Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in docker/setup-buildx-action#595 Bump brace-expansion from 1.1.13 to 1.1.18 in docker/setup-buildx-action#600 Bump js-yaml from 5.2.0 to 5.3.0 in docker/setup-buildx-action#585 Bump postcss from 8.5.10 to 8.5.25 in docker/setup-buildx-action#598 Bump undici from 6.27.0 to 6.28.0 in docker/setup-buildx-action#601 Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0 v4.2.0 Preserve names in esbuild bundle by @crazy-max in docker/setup-buildx-action#572 Bump @actions/core from 3.0.0 to 3.0.1 in docker/setup-buildx-action#551 Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/setup-buildx-action#557 docker/setup-buildx-action#580 Bump @sigstore/core from 3.1.0 to 3.2.1 in docker/setup-buildx-action#573 Bump @sigstore/verify from 3.1.0 to 3.1.1 in docker/setup-buildx-action#576 Bump js-yaml from 4.1.1 to 5.2.0 in docker/setup-buildx-action#562 Bump sigstore from 4.1.0 to 4.1.1 in docker/setup-buildx-action#577 Bump tmp from 0.2.5 to 0.2.7 in docker/setup-buildx-action#556 Bump undici from 6.25.0 to 6.27.0 in docker/setup-buildx-action#570 Bump vite from 7.3.2 to 7.3.6 in docker/setup-buildx-action#569 Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0 v4.1.0 Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in docker/setup-buildx-action#489 Bump brace-expansion from 1.1.12 to 5.0.6 in docker/setup-buildx-action#547 docker/setup-buildx-action#508 Bump fast-xml-builder from 1.0.0 to 1.2.0 in docker/setup-buildx-action#540 Bump fast-xml-parser from 5.4.2 to 5.8.0 in docker/setup-buildx-action#496 Bump flatted from 3.3.3 to 3.4.2 in docker/setup-buildx-action#499 Bump glob from 10.3.12 to 13.0.6 in docker/setup-buildx-action#495 Bump handlebars from 4.7.8 to 4.7.9 in docker/setup-buildx-action#504 Bump lodash from 4.17.23 to 4.18.1 in docker/setup-buildx-action#523 Bump picomatch from 4.0.3 to 4.0.4 in docker/setup-buildx-action#503 Bump postcss from 8.5.6 to 8.5.10 in docker/setup-buildx-action#537 ... (truncated) ## Commits f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint e700274 chore: update generated content 3061c91 skip BuildKit image pre-pulls for explicit endpoints 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create bd6e702 chore: update generated content 6268c9d pull BuildKit image before builder creation e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions- 533ed8e build(deps): bump the codeql-actions group with 2 updates bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers d5079fb chore: update generated content Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Iade7c3c91ff2a3a1e2f8d993eeb18ca57c2eacc4 GitHub-PR: #10 GitHub-Hash: 1de0d3026766888f Signed-off-by: fdio.github <releng+fdio-github@linuxfoundation.org>

dependabot Bot added bot dependencies labels Aug 31, 2026

dependabot Bot mentioned this pull request Aug 31, 2026

build(deps): bump js-yaml from 5.3.0 to 5.4.0 #607

Closed

[dependabot skip] chore: update generated content

d055e6c

crazy-max approved these changes Sep 1, 2026

View reviewed changes

crazy-max merged commit 120ea02 into master Sep 1, 2026
51 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/js-yaml-5.4.1 branch September 1, 2026 11:29

Navigation Menu

Repository navigation

build(deps): bump js-yaml from 5.3.0 to 5.4.1 - #608

build(deps): bump js-yaml from 5.3.0 to 5.4.1#608
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/js-yaml-5.4.1

dependabot Bot commented on behalf of github Aug 31, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 31, 2026

[5.4.1] - 2026-08-26

Changed

Security

[5.4.0] - 2026-08-25

Added

Changed

Fixed

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant