Re: [PR] Bump js-yaml from 3.8.3 to 3.15.0 in /ambari-web [ambari]

2026-09-08 Thread via GitHub 


JiaLiangC closed pull request #4157: Bump js-yaml from 3.8.3 to 3.15.0 in 
/ambari-web
URL: https://github.com/apache/ambari/pull/4157


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Re: [PR] Bump js-yaml from 3.8.3 to 3.15.0 in /ambari-web [ambari]

2026-09-08 Thread via GitHub 


dependabot[bot] commented on PR #4157:
URL: https://github.com/apache/ambari/pull/4157#issuecomment-5583108927

   OK, I won't notify you again about this release, but will get in touch when 
a new version is available. If you'd rather skip all updates until the next 
major or minor version, let me know by commenting `@dependabot ignore this 
major version` or `@dependabot ignore this minor version`. You can also ignore 
all major, minor, or patch releases for a dependency by adding an [`ignore` 
condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore)
 with the desired `update_types` to your config file.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts 
on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Re: [PR] Bump js-yaml from 3.8.3 to 3.15.0 in /ambari-web [ambari]

2026-09-08 Thread via GitHub 


JiaLiangC commented on PR #4157:
URL: https://github.com/apache/ambari/pull/4157#issuecomment-5583107832

   Superseded by #4208 (AMBARI-26653), which has now been merged into `trunk`. 
That consolidated change includes this dependency remediation together with the 
compatibility updates and validation required for the current codebase. Closing 
this automated PR as no longer needed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

[PR] Bump js-yaml from 3.8.3 to 3.15.0 in /ambari-web [ambari]

2026-07-27 Thread via GitHub 


dependabot[bot] opened a new pull request, #4157:
URL: https://github.com/apache/ambari/pull/4157

   Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.8.3 to 3.15.0.
   
   Changelog
   Sourced from https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md";>js-yaml's 
changelog.
   
   4.3.0, 3.15.0 - 2026-06-27
   Security
   
   Backported maxTotalMergeKeys option.
   
   [5.2.0] - 2026-06-26
   Added
   
   Added maxTotalMergeKeys (1) loader option to limit the 
total number of
   keys processed by YAML merge (<<) across one 
load() / loadAll() call.
   Added maxAliases (-1) loader option to limit the number of 
YAML aliases per
   document.
   
   Removed
   
   maxMergeSeqLength replaced with 
maxTotalMergeKeys for limiting YAML merge
   processing.
   
   Fixed
   
   Round-trip of integers with exponential form (>= 
1e21)
   
   [5.1.0] - 2026-06-23
   Added
   
   Collection tags can finalize an incrementally populated carrier into a
   different result value.
   
   Changed
   
   [breaking] quoteStyle now selects the preferred quote 
style; use the
   restored forceQuotes option to force quoting non-key 
strings.
   
   [5.0.0] - 2026-06-20
   Added
   
   Added named exports for schemas, tags, parser events and AST 
utilities.
   Reworked JSON_SCHEMA and CORE_SCHEMA with 
spec-compliant scalar resolution
   rules, and added YAML11_SCHEMA.
   Added realMapTag for lossless mappings with non-string and 
complex keys.
   Object-based mappings now reject complex keys instead of stringifying 
them.
   Added dump() transform option for changing the 
generated AST before
   rendering.
   Added dump() options seqInlineFirst, 
flowBracketPadding,
   flowSkipCommaSpace, flowSkipColonSpace, 
quoteFlowKeys, quoteStyle and
   tagBeforeAnchor.
   Added formal data layers (events and AST) for modular data pipelines.
   
   Added low-level parser (to events), presenter and visitor APIs.
   
   
   Added the https://github.com/yaml/yaml-test-suite";>YAML Test 
Suite to the
   test set.
   
   Changed
   
   See the https://github.com/nodeca/js-yaml/blob/master/docs/migrate_v4_to_v5.md";>migration
 guide for upgrade notes.
   Rewritten in TypeScript and reorganized the public API around flat named
   exports.
   
   
   
   ... (truncated)
   
   
   Commits
   
   https://github.com/nodeca/js-yaml/commit/c34b6c40027a769eb0d67958ae615268a1d55f54";>c34b6c4
 3.15.0 released
   https://github.com/nodeca/js-yaml/commit/21e13d363f33501c7ee6ca988b88c29084999f72";>21e13d3
 dist rebuild
   https://github.com/nodeca/js-yaml/commit/4165c62630d64fe4f25fb0d03139c7e137b24b1c";>4165c62
 Add v3-legacy tag for publish
   https://github.com/nodeca/js-yaml/commit/d8ff750b0130e4e4b4062fb0dbd32027e41d4c51";>d8ff750
 Add package lock
   https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7";>24f13e7
 Added maxTotalMergeKeys (1) loader option (v5 backport)
   https://github.com/nodeca/js-yaml/commit/9963d366dfbde0c69722452bcd40b41e7e4160a0";>9963d36
 3.14.2 released
   https://github.com/nodeca/js-yaml/commit/10d3c8e70a6888543f5cdb656bb39f73e0ea77c1";>10d3c8e
 dist rebuild
   https://github.com/nodeca/js-yaml/commit/5278870a17454fe8621dbd8c445c412529525266";>5278870
 fix prototype pollution in merge (<<) (https://redirect.github.com/nodeca/js-yaml/issues/731";>#731)
   https://github.com/nodeca/js-yaml/commit/37caaad57dc37d350d9a4577a5da53f482bb2983";>37caaad
 3.14.1 released
   https://github.com/nodeca/js-yaml/commit/094c0f7a79e6ff9e2b4d50b22686d2586894b58f";>094c0f7
 dist rebuild
   Additional commits viewable in https://github.com/nodeca/js-yaml/compare/3.8.3...3.15.0";>compare 
view
   
   
   
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=js-yaml&package-manager=npm_and_yarn&previous-version=3.8.3&new-version=3.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   
   Dependabot commands and options
   
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show  ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR