This is an automated email from the ASF dual-hosted git repository. github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/release/v1.2/pr-8706-ddf802b3c54451df1cc9f3733a6cd5c058a25c1e in repository https://gitbox.apache.org/repos/asf/texera.git
commit 2e9d355729a65fc21c6c4297555f465d4e9cb223 Author: Xuan Gu <[email protected]> AuthorDate: Sun Sep 27 07:02:14 2026 +0000 fix(deps, frontend, v1.2): bump hono to 4.13.1 and js-yaml to 4.3.1 (#8706) ### What changes were proposed in this PR? Backport of #7587 and #7588 to release/v1.2: two lockfile-only bumps of transitive frontend dependencies, hono 4.12.31 -> 4.13.1 and js-yaml 4.2.0 -> 4.3.1, matching the versions main has used since 2026-08-12. Both originals are Dependabot security updates. They merged with the release/v1.2 label before the direct-backport automation went live (its first run was 2026-09-04), so no backport was ever pushed or drafted. ### Any related issues, documentation, discussions? Backport of #7587 and #7588. ### How was this PR tested? Both cherry-picks applied cleanly; release-branch CI runs on this PR. ### Was this PR authored or co-authored using generative AI tooling? Generated-by: Claude Fable 5 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Xinyuan Lin <[email protected]> --- frontend/yarn.lock | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/frontend/yarn.lock b/frontend/yarn.lock index 674599a08f..a6be149a4b 100644 --- a/frontend/yarn.lock +++ b/frontend/yarn.lock @@ -10793,9 +10793,9 @@ __metadata: linkType: hard "hono@npm:^4.11.4": - version: 4.12.31 - resolution: "hono@npm:4.12.31" - checksum: 10c0/f80be65cd657cc353b3e478d55424a373d11801b2a1ffc96d94def813c6d852e76bea4437f5df252b15caca98742040d26950bc9c865d8720b89a00a9eac5249 + version: 4.13.1 + resolution: "hono@npm:4.13.1" + checksum: 10c0/83524961f806293464e6c3b31a7fd2ab8cd8e9cb66e65dea1fbbefb70744844c13b7409ed9b49b43e8543e5c0f1b851f2586fa759eea9da0b69503b58cd0d985 languageName: node linkType: hard @@ -11624,13 +11624,13 @@ __metadata: linkType: hard "js-yaml@npm:^4.1.0": - version: 4.2.0 - resolution: "js-yaml@npm:4.2.0" + version: 4.3.1 + resolution: "js-yaml@npm:4.3.1" dependencies: argparse: "npm:^2.0.1" bin: js-yaml: bin/js-yaml.js - checksum: 10c0/1916456c118746603b067d74bbcbb0445d9a1d5e474ad4ae775e7b20525bed902e01d9d97dd0c81fcd8d4f596162309d0eb057f4aa38f3e9647f14075e9dea45 + checksum: 10c0/13c500ca322e0c3f8c81686e6ecda96d2ea37b45247a420c17c7db36932d6965cc27391abc2d1a104501600e7f0d947a5f8b7be6db619c4fefa87901b3512807 languageName: node linkType: hard
