circleci-orb
circleci-orb copied to clipboard
chore(deps): update dependency js-yaml to version 4.x 🌟
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| js-yaml | 3.13.1 -> 4.1.0 |
Release Notes
nodeca/js-yaml
v4.1.0
Added
- Types are now exported as
yaml.types.XXX. - Every type now has
optionsproperty with original arguments kept as they were (seeyaml.types.int.optionsas an example).
Changed
Schema.extend()now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered asabcdinstead ofcbad).
v4.0.0
Changed
- Check migration guide to see details for all breaking changes.
- Breaking: "unsafe" tags
!!js/function,!!js/regexp,!!js/undefinedare moved to js-yaml-js-types package. - Breaking: removed
safe*functions. Useload,loadAll,dumpinstead which are all now safe by default. yaml.DEFAULT_SAFE_SCHEMAandyaml.DEFAULT_FULL_SCHEMAare removed, useyaml.DEFAULT_SCHEMAinstead.yaml.Schema.create(schema, tags)is removed, useschema.extend(tags)instead.!!binarynow always mapped toUint8Arrayon load.- Reduced nesting of
/libfolder. - Parse numbers according to YAML 1.2 instead of YAML 1.1 (
01234is now decimal,0o1234is octal,1:23is parsed as string instead of base60). dump()no longer quotes:,[,],(,)except when necessary, #​470, #​557.- Line and column in exceptions are now formatted as
(X:Y)instead ofat line X, column Y(also present in compact format), #​332. - Code snippet created in exceptions now contains multiple lines with line numbers.
dump()now serializesundefinedasnullin collections and removes keys withundefinedin mappings, #​571.dump()withskipInvalid=truenow serializes invalid items in collections as null.- Custom tags starting with
!are now dumped as!taginstead of!<!tag>, #​576. - Custom tags starting with
tag:yaml.org,2002:are now shorthanded using!!, #​258.
Added
- Added
.mjs(es modules) support. - Added
quotingTypeandforceQuotesoptions for dumper to configure string literal style, #​290, #​529. - Added
styles: { '!!null': 'empty' }option for dumper (serializes{ foo: null }as "foo:"), #​570. - Added
replaceroption (similar to option in JSON.stringify), #​339. - Custom
Tagcan now handle all tags or multiple tags with the same prefix, #​385.
Fixed
- Astral characters are no longer encoded by
dump(), #​587. - "duplicate mapping key" exception now points at the correct column, #​452.
- Extra commas in flow collections (e.g.
[foo,,bar]) now throw an exception instead of producing null, #​321. __proto__key no longer overrides object prototype, #​164.- Removed
bower.json. - Tags are now url-decoded in
load()and url-encoded indump()(previously usage of custom non-ascii tags may have led to invalid YAML that can't be parsed). - Anchors now work correctly with empty nodes, #​301.
- Fix incorrect parsing of invalid block mapping syntax, #​418.
- Throw an error if block sequence/mapping indent contains a tab, #​80.
v3.14.1
Security
- Fix possible code execution in (already unsafe)
.load()(in &anchor).
v3.14.0
Changed
- Support
safe/loadAll(input, options)variant of call. - CI: drop outdated nodejs versions.
- Dev deps bump.
Fixed
Configuration
📅 Schedule: Branch creation - "after 10pm every weekday,every weekend,before 5am every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, click this checkbox.
This PR has been generated by Mend Renovate. View repository job log here.
âš Artifact update problem
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
â™» Renovate will retry this branch, including artifacts, only when one of the following happens:
- any of the package files in this branch needs updating, or
- the branch becomes conflicted, or
- you click the rebase/retry checkbox if found above, or
- you rename this PR's title to start with "rebase!" to trigger it manually
The artifact failure details are included below:
File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR!
npm ERR! While resolving: [email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/ava
npm ERR! dev ava@"2.4.0" from the root project
npm ERR!
npm ERR! Could not resolve dependency:
npm ERR! peer ava@"0.*" from [email protected]
npm ERR! node_modules/ava-ts
npm ERR! dev ava-ts@"0.25.2" from the root project
npm ERR!
npm ERR! Conflicting peer dependency: [email protected]
npm ERR! node_modules/ava
npm ERR! peer ava@"0.*" from [email protected]
npm ERR! node_modules/ava-ts
npm ERR! dev ava-ts@"0.25.2" from the root project
npm ERR!
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR!
npm ERR! See /tmp/renovate-cache/others/npm/eresolve-report.txt for a full report.
npm ERR! A complete log of this run can be found in:
npm ERR! /tmp/renovate-cache/others/npm/_logs/2023-02-22T03_59_32_836Z-debug-0.log