Skip to content

build(deps): Bump js-yaml and markdownlint-cli2 - #287

Merged
kyle-sexton merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-89f90c6847
Jul 29, 2026
Merged

build(deps): Bump js-yaml and markdownlint-cli2#287
kyle-sexton merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-89f90c6847

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml to 5.2.2 and updates ancestor dependency markdownlint-cli2. These dependencies need to be updated together.

Updates js-yaml from 5.2.1 to 5.2.2

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.
Commits
  • 3c29559 5.2.2 released
  • 3e5240f parser: avoid reparsing flow sequence pair keys
  • bd7ebb2 fix: quote flow scalars where a colon precedes a flow indicator (#773)
  • See full diff in compare view

Updates markdownlint-cli2 from 0.23.1 to 0.23.2

Changelog

Sourced from markdownlint-cli2's changelog.

0.23.2

  • Update dependencies
Commits
  • b82a6c8 Update to version 0.23.2.
  • e4e659d Add a stub for process.nextTick (using queueMicrotask) now that globby (indir...
  • 99760af Bump globby from 16.2.1 to 16.2.2
  • 3070236 Address new ESLint warnings from previous commit.
  • 6e3cc93 Bump eslint-plugin-unicorn from 71.1.0 to 72.0.0
  • 4ba8177 Add eslint-package-json/all to lint script, address new issues.
  • 9cb99b2 Refactor eslint.config.mjs to use defineConfig, change eslint-plugin-n from "...
  • 37fb0ec Address new ESLint warnings from previous commit.
  • f7fea61 Bump eslint-node-test from 0.2.0 to 0.3.0
  • 85bb5e7 Bump js-yaml from 5.2.1 to 5.2.2
  • Additional commits viewable in compare view

Related

  • Routine npm dependency bump: markdownlint-cli2 0.23.1 -> 0.23.2 (patch, direct dev dependency), pulling transitive js-yaml 5.2.1 -> 5.2.2 (patch).

No linked issue.

@dependabot dependabot Bot added the dependencies Dependency updates (Dependabot / Renovate). label Jul 27, 2026
Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 5.2.2 and updates ancestor dependency [markdownlint-cli2](https://github.com/DavidAnson/markdownlint-cli2). These dependencies need to be updated together.


Updates `js-yaml` from 5.2.1 to 5.2.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.1...5.2.2)

Updates `markdownlint-cli2` from 0.23.1 to 0.23.2
- [Changelog](https://github.com/DavidAnson/markdownlint-cli2/blob/main/CHANGELOG.md)
- [Commits](DavidAnson/markdownlint-cli2@v0.23.1...v0.23.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: indirect
- dependency-name: markdownlint-cli2
  dependency-version: 0.23.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-89f90c6847 branch from 76aabf2 to 1af1e70 Compare July 27, 2026 15:17
@kyle-sexton

kyle-sexton commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

Merge-lane claim released. ## Related appended per the owner precedent on #243/#242 (same disposition cycle 1 applied to #282/#283). pr-issue-linkage now SUCCESS on 1af1e70719def12f922150a9682ae3faff2ac97b; merge state UNSTABLE -> CLEAN, head unchanged.

Not merged: the merge gate holds this PR on author 'app/dependabot' is a dependency manager. Dependency acceptance is human judgment in every tier — this is now human-merge-ready, awaiting that call.

@kyle-sexton
kyle-sexton merged commit 8466c0f into main Jul 29, 2026
44 of 46 checks passed
@kyle-sexton
kyle-sexton deleted the dependabot/npm_and_yarn/multi-89f90c6847 branch July 29, 2026 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates (Dependabot / Renovate).

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant