[Snyk] Upgrade yaml from 2.2.2 to 2.4.1

[scamcloud]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade yaml from 2.2.2 to 2.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 13 versions ahead of your current version.

• The recommended version was released 2 months ago, on 2024-03-06.

Release notes

Package name: yaml

• 2.4.1 - 2024-03-06
  
  • cst: Do not drop trailing newline after line comment in block-map if followed by unindented block-seq value (#525)
  • Stringify flow collection comments in parent (#528)
  • Do not skip folding lines after the first in indented block scalars (#529)
• 2.4.0 - 2024-02-25
  
  • Add a command-line tool (#523)
  • Use the lineWidth option for line breaking in flow collections (#522)
• 2.3.4 - 2023-11-03
  
  • Do not throw for carriage return in tag shorthand (#501)
• 2.3.3 - 2023-10-14
  
  • Do not throw error on malformed URI escape in tag (#498)
• 2.3.2 - 2023-08-28
  
  • Fix docs typo (#489)
  • Do not require quotes for implicit keys with flow indicators (#494)
  • Update Prettier to v3 & update ESLint config
• 2.3.1 - 2023-05-26
  
  • Drop npm from package.json "engines" config (#476)
• 2.3.0 - 2023-05-23
  

  This release corresponds with the release of yaml-types v0.2.0, an expanding library of custom tags or types for use with yaml.

  This release contains no changes from v2.3.0-5, and the notes below include all changes from the v2.3.0-x prereleases.

  Custom Tag Improvements

  • Add export of createNode() & createPair() to 'yaml/util' (#457)
  • Add static from() methods to simplify tag development, and otherwise make extending custom collections easier (#467)

  TypeScript Improvements

  • Add a second optional generic type argument Strict to Document instances. (#441)
  • Add types exports for TypeScript (#463)
  • Export StringifyContext type from 'yaml/util' (#464)

  Other New Features

  • Add a toJS(doc, options?) method to nodes (#451, #458)
  • Set explicit tag during createNode() for non-default tags (#464)

  Bugfixes

  • Use correct argument order when stringifying flow collection comments (#443)
  • Improve first-line folding for block scalars (#422)
• 2.3.0-5 - 2023-05-06
  
  • Make extending custom collections easier (#467)
  • Fix corner case failure in error pretty-printer (CVE-2023-2251)
• 2.3.0-4 - 2023-04-18
  

  New Features

  • Set explicit tag during createNode() for non-default tags (#464)
  • Export StringifyContext type from 'yaml/util' (#464)
• 2.3.0-3 - 2023-04-14
• 2.3.0-2 - 2023-04-14
• 2.3.0-1 - 2023-04-04
• 2.3.0-0 - 2023-03-11
• 2.2.2 - 2023-04-24
  

  This patch release includes a fix for an error that could be thrown in parseDocument for degenerate input. Otherwise, it's a patch release uplifting a few fixes from the ongoing v2.3 work to v2.2:

  • Corner case failure in error pretty-printer (CVE-2023-2251)
  • Use correct argument order when stringifying flow collection comments (#443)
  • First-line folding for block scalars (#422)

from yaml GitHub release notes

Commit messages

Package name: yaml

• 4aa56d3 2.4.1
• e651ce1 chore: Refresh lockfile
• 1775f13 test: Drop unused import to satisfy TS
• 40903db fix(cst): Do not drop trailing newline after line comment in block-map if followed by unindented block-seq value (fixes #525)
• 46a816e fix: Do not skip folding lines after the first in indented block scalars (fixes #529)
• 750adbe fix: Stringify flow collection comments in parent (fixes #528)
• e07998c ci: Move update action to yaml-playground, where it has write access
• 5ba73d1 ci: Update yaml-playground build & BrowserStack tests (#524)
• 8d8cfb7 2.4.0
• e6a5e28 feat: Add CLI tool (#523)
• 959f1cf docs: Add a predocs script creating symlinks for docs generator
• 74a86e2 docs: Add yaml-types mention
• e80a4c5 chore: Update json-test-suite
• b5fa4cb chore: Update Babel plugins
• 9fc76fa chore: Update @ types/node to v20
• 495cfeb chore: Update rollup to v4
• 28b3ba5 chore: Update typescript-eslint to v7
• e4f963a style: Apply updated Prettier rules
• cdc032e chore: Refresh lockfile
• be11591 ci: Update GitHub action & Node.js versions
• 1838a66 docs: Clarify doubleQuotedMinMultiLineLength option (closes #512)
• 9a8aa0d fix: Use the `lineWidth` option for line breaking in flow collections (#522)
• b7696fc 2.3.4
• 4af7419 fix: Carriage return in tag shorthand (#501)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.