Skip to content

Update dependency js-yaml to v5.2.0#3051

Open
gardener-ci-robot wants to merge 1 commit into
masterfrom
renovate/js-yaml-5.x-lockfile
Open

Update dependency js-yaml to v5.2.0#3051
gardener-ci-robot wants to merge 1 commit into
masterfrom
renovate/js-yaml-5.x-lockfile

Conversation

@gardener-ci-robot

@gardener-ci-robot gardener-ci-robot commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
js-yaml 5.0.05.2.0 age confidence

Release Notes

nodeca/js-yaml (js-yaml)

v5.2.0

Compare Source

Added
  • Added maxTotalMergeKeys (10000) loader option to limit the total number of
    keys processed by YAML merge (<<) across one load() / loadAll() call.
  • Added maxAliases (-1) loader option to limit the number of YAML aliases per
    document.
Removed
  • maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge
    processing.
Fixed
  • Round-trip of integers with exponential form (>= 1e21)

v5.1.0

Compare Source

Added
  • Collection tags can finalize an incrementally populated carrier into a
    different result value.
Changed
  • [breaking] quoteStyle now selects the preferred quote style; use the
    restored forceQuotes option to force quoting non-key strings.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@gardener-ci-robot gardener-ci-robot added kind/enhancement Enhancement, improvement, extension renovate labels Jun 30, 2026
@gardener-prow

gardener-prow Bot commented Jun 30, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign klocke-io for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@gardener-prow gardener-prow Bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Jun 30, 2026
@coderabbitai

coderabbitai Bot commented Jun 30, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

Updates .pnp.cjs Yarn PnP metadata to bump js-yaml from 4.2.0 to 4.3.0 and from 5.0.0 to 5.2.0. All packageDependencies array references, package descriptor entries, and packageLocation paths are updated to match the new versions.

js-yaml PnP metadata update

Layer / File(s) Summary
Dependency array version bumps
.pnp.cjs
Eight packageDependencies arrays referencing js-yaml are updated: npm:4.2.0npm:4.3.0 and npm:5.0.0npm:5.2.0.
Package descriptor and packageLocation updates
.pnp.cjs
The js-yaml package descriptor blocks are replaced with new entries for npm:4.3.0 and npm:5.2.0, including updated packageLocation zip paths and nested packageDependencies.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

  • gardener/dashboard#3036: Directly related — also updates .pnp.cjs PnP metadata for js-yaml package versions, packageLocation, and packageDependencies entries.

Suggested labels

size/S

Suggested reviewers

  • grolu
  • holgerkoser
  • klocke-io
  • petersutter

Poem

🐇 A yaml bump here, a version there,
From 4.2 to 4.3 with flair,
And 5.0 hops to 5.2 with glee,
The PnP cache now lives in harmony~
This rabbit approves of tidy deps! 🌿

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The PR description lacks the required template sections, including /area, /kind, issue reference, and the requested summary fields. Add the template sections with /area and /kind, a brief why-this-change summary, issue link if any, special notes, and a release note block.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely states the main change: upgrading js-yaml to 5.2.0.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/js-yaml-5.x-lockfile

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@gardener-prow gardener-prow Bot added the cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. label Jun 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. kind/enhancement Enhancement, improvement, extension renovate size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant