Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Upgrade yaml from 2.2.2 to 2.4.2 #4

Merged
merged 1 commit into from
Jun 30, 2024

Conversation

SherfeyInv
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade yaml from 2.2.2 to 2.4.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 14 versions ahead of your current version.

  • The recommended version was released on a month ago.

Release notes
Package name: yaml
  • 2.4.2 - 2024-04-28
    • Restrict YAML 1.1 boolean strings to their explicit capitalization (#530)
    • Add sponsorship by Scipress (#536)
  • 2.4.1 - 2024-03-06
    • cst: Do not drop trailing newline after line comment in block-map if followed by unindented block-seq value (#525)
    • Stringify flow collection comments in parent (#528)
    • Do not skip folding lines after the first in indented block scalars (#529)
  • 2.4.0 - 2024-02-25
    • Add a command-line tool (#523)
    • Use the lineWidth option for line breaking in flow collections (#522)
  • 2.3.4 - 2023-11-03
    • Do not throw for carriage return in tag shorthand (#501)
  • 2.3.3 - 2023-10-14
    • Do not throw error on malformed URI escape in tag (#498)
  • 2.3.2 - 2023-08-28
    • Fix docs typo (#489)
    • Do not require quotes for implicit keys with flow indicators (#494)
    • Update Prettier to v3 & update ESLint config
  • 2.3.1 - 2023-05-26
    • Drop npm from package.json "engines" config (#476)
  • 2.3.0 - 2023-05-23

    This release corresponds with the release of yaml-types v0.2.0, an expanding library of custom tags or types for use with yaml.

    This release contains no changes from v2.3.0-5, and the notes below include all changes from the v2.3.0-x prereleases.

    Custom Tag Improvements

    • Add export of createNode() & createPair() to 'yaml/util' (#457)
    • Add static from() methods to simplify tag development, and otherwise make extending custom collections easier (#467)

    TypeScript Improvements

    • Add a second optional generic type argument Strict to Document instances. (#441)
    • Add types exports for TypeScript (#463)
    • Export StringifyContext type from 'yaml/util' (#464)

    Other New Features

    • Add a toJS(doc, options?) method to nodes (#451, #458)
    • Set explicit tag during createNode() for non-default tags (#464)

    Bugfixes

    • Use correct argument order when stringifying flow collection comments (#443)
    • Improve first-line folding for block scalars (#422)
  • 2.3.0-5 - 2023-05-06
    • Make extending custom collections easier (#467)
    • Fix corner case failure in error pretty-printer (CVE-2023-2251)
  • 2.3.0-4 - 2023-04-18
  • 2.3.0-3 - 2023-04-14
  • 2.3.0-2 - 2023-04-14
  • 2.3.0-1 - 2023-04-04
  • 2.3.0-0 - 2023-03-11
  • 2.2.2 - 2023-04-24

    This patch release includes a fix for an error that could be thrown in parseDocument for degenerate input. Otherwise, it's a patch release uplifting a few fixes from the ongoing v2.3 work to v2.2:

    • Corner case failure in error pretty-printer (CVE-2023-2251)
    • Use correct argument order when stringifying flow collection comments (#443)
    • First-line folding for block scalars (#422)
from yaml GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade yaml from 2.2.2 to 2.4.2.

See this package in npm:
yaml

See this project in Snyk:
https://app.snyk.io/org/sherfeyinv/project/ffdcc0b7-9cf5-48f9-a014-91856b95f221?utm_source=github&utm_medium=referral&page=upgrade-pr
@SherfeyInv SherfeyInv merged commit 0139b00 into master Jun 30, 2024
1 check passed
@SherfeyInv SherfeyInv deleted the snyk-upgrade-3411b722c0437448b5a44c2b0b3d66e9 branch June 30, 2024 07:29
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants