This is an automated email from the ASF dual-hosted git repository. jacopoc pushed a commit to branch trunk in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit 3d30321ed0367a9e5e4ff976eb9bbfbf3f806cef Author: Jacopo Cappellato <[email protected]> AuthorDate: Tue Jun 23 15:15:19 2026 +0200 Improved: Update js-yaml to version 4.2.0 to resolve a security warning --- framework/rest-api/package-lock.json | 16 +++++++++++++--- framework/rest-api/package.json | 3 +++ 2 files changed, 16 insertions(+), 3 deletions(-) diff --git a/framework/rest-api/package-lock.json b/framework/rest-api/package-lock.json index b8551be0a8..f1cebf8e39 100644 --- a/framework/rest-api/package-lock.json +++ b/framework/rest-api/package-lock.json @@ -474,9 +474,19 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.1.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz", - "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==", + "version": "4.2.0", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz", + "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==", + "funding": [ + { + "type": "github", + "url": "https://github.com/sponsors/puzrin" + }, + { + "type": "github", + "url": "https://github.com/sponsors/nodeca" + } + ], "license": "MIT", "dependencies": { "argparse": "^2.0.1" diff --git a/framework/rest-api/package.json b/framework/rest-api/package.json index 4f63b215a2..ddd0b580c0 100644 --- a/framework/rest-api/package.json +++ b/framework/rest-api/package.json @@ -6,5 +6,8 @@ "dependencies": { "swagger-ui-dist": "5.32.8", "redoc": "2.5.3" + }, + "overrides": { + "js-yaml": "4.2.0" } }

