dependabot[bot] opened a new pull request, #41520: URL: https://github.com/apache/superset/pull/41520
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 5.0.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md";>js-yaml's changelog</a>.</em></p> <blockquote> <h2>[5.0.0] - 2026-06-20</h2> <h3>Added</h3> <ul> <li>Added named exports for schemas, tags, parser events and AST utilities.</li> <li>Reworked <code>JSON_SCHEMA</code> and <code>CORE_SCHEMA</code> with spec-compliant scalar resolution rules, and added <code>YAML11_SCHEMA</code>.</li> <li>Added <code>realMapTag</code> for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.</li> <li>Added <code>dump()</code> <code>transform</code> option for changing the generated AST before rendering.</li> <li>Added <code>dump()</code> options <code>seqInlineFirst</code>, <code>flowBracketPadding</code>, <code>flowSkipCommaSpace</code>, <code>flowSkipColonSpace</code>, <code>quoteFlowKeys</code>, <code>quoteStyle</code> and <code>tagBeforeAnchor</code>.</li> <li>Added formal data layers (events and AST) for modular data pipelines. <ul> <li>Added low-level parser (to events), presenter and visitor APIs.</li> </ul> </li> <li>Added the <a href="https://github.com/yaml/yaml-test-suite";>YAML Test Suite</a> to the test set.</li> </ul> <h3>Changed</h3> <ul> <li>See the <a href="https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md";>migration guide</a> for upgrade notes.</li> <li>Rewritten in TypeScript and reorganized the public API around flat named exports.</li> <li>Reduced the set of exported schemas: <ul> <li>YAML 1.2 schemas: <code>CORE_SCHEMA</code> (loader default), <code>JSON_SCHEMA</code>, <code>FAILSAFE_SCHEMA</code>.</li> <li><code>YAML11_SCHEMA</code>, a combination of all YAML 1.1 tags (YAML 1.1 does not specify a schema, only "types").</li> </ul> </li> <li><code>load</code>/<code>dump</code> default behaviour is now specified exactly via schemas: <ul> <li><code>load</code> uses <code>CORE_SCHEMA</code>, without <code>!!merge</code> by default.</li> <li><code>dump</code> uses <code>YAML11_SCHEMA</code> + <code>CORE_SCHEMA</code> for the quoting check, to guarantee backward compatibility by default.</li> </ul> </li> <li><code>!!set</code> is now loaded as a JavaScript <code>Set</code>.</li> <li>Replaced the <code>Type</code> API with a tags API. Similar, but more precise and simpler. See examples for details. Tags can be defined via <code>defineScalarTag()</code>, <code>defineSequenceTag()</code> and <code>defineMappingTag()</code>, or as a spread + override of an existing tag.</li> <li>Renamed <code>Schema.extend()</code> to <code>Schema.withTags()</code>.</li> <li>Expanded YAML 1.2 conformance and improved handling of directives, document markers, block keys, multiline scalars, tag syntax and other things.</li> <li><code>load()</code> now throws on empty input instead of returning <code>undefined</code>.</li> <li>Moved browser builds to the <code>js-yaml/browser</code> export.</li> <li>Deprecated the <code>loadAll</code> signature with an iterator (still works, but is a candidate for removal).</li> </ul> <h3>Removed</h3> <ul> <li>Removed deprecated <code>safeLoad()</code>, <code>safeLoadAll()</code> and <code>safeDump()</code> exports.</li> <li>Removed <code>DEFAULT_SCHEMA</code> and the nested <code>types</code> export.</li> <li>Removed loader options <code>onWarning</code>, <code>legacy</code> and <code>listener</code>.</li> <li>Removed dumper options <code>styles</code>, <code>replacer</code>, <code>noCompatMode</code>, <code>condenseFlow</code>, <code>quotingType</code> and <code>forceQuotes</code>. Renamed <code>noArrayIndent</code> to <code>seqNoIndent</code>. Formatting and representation are now configured through presenter options,</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodeca/js-yaml/commit/75148bc4f5eb69b3d338e1c355d8bb2dba5bdf34";><code>75148bc</code></a> 5.0.0 released</li> <li><a href="https://github.com/nodeca/js-yaml/commit/704b25d29229c52e66b824bfc1908d8f3ba3a45e";><code>704b25d</code></a> Quote document markers followed by whitespace</li> <li><a href="https://github.com/nodeca/js-yaml/commit/42dea284430b1077f95a326f14db422b19bedecc";><code>42dea28</code></a> Support complex !!pairs keys with realMapTag</li> <li><a href="https://github.com/nodeca/js-yaml/commit/6cf374ee84f51d78a8286bbcbbd3ac2628153927";><code>6cf374e</code></a> Fix dumping strings that collide with YAML markers</li> <li><a href="https://github.com/nodeca/js-yaml/commit/65b8d9446a1a844c27b67b8206652e84262038df";><code>65b8d94</code></a> Clarify !!omap/!!pairs support</li> <li><a href="https://github.com/nodeca/js-yaml/commit/33e364065e30aac851ecbeb041c1793513bf5c4d";><code>33e3640</code></a> Move tagname helpers to <code>common/</code> and remove unused exports</li> <li><a href="https://github.com/nodeca/js-yaml/commit/4dd582bd0034092f7ed07ac05b40d5b0b6aefcc5";><code>4dd582b</code></a> Cleanup export types</li> <li><a href="https://github.com/nodeca/js-yaml/commit/39b3792dc3001c1af3b97ca0bf1732fc55441ca8";><code>39b3792</code></a> Add types export</li> <li><a href="https://github.com/nodeca/js-yaml/commit/0cd01e94b336acce85d02e8d5ef8517db915eac8";><code>0cd01e9</code></a> docs: update for v5</li> <li><a href="https://github.com/nodeca/js-yaml/commit/c5a61a46508d8a2c30fed68555cd070c0568d381";><code>c5a61a4</code></a> Fix presenter coverage</li> <li>Additional commits viewable in <a href="https://github.com/nodeca/js-yaml/compare/4.2.0...5.0.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
