Skip to content

Bump npm js-yaml from 5.2.3 to v5.3.0 - #1052

Merged
dghubble-renovate[bot] merged 1 commit into
mainfrom
renovate/js-yaml-5.x-lockfile
Aug 14, 2026
Merged

Bump npm js-yaml from 5.2.3 to v5.3.0#1052
dghubble-renovate[bot] merged 1 commit into
mainfrom
renovate/js-yaml-5.x-lockfile

Conversation

@dghubble-renovate

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
js-yaml devDependencies minor 5.2.35.3.0

Release Notes

nodeca/js-yaml (js-yaml)

v5.3.0

Compare Source

This release focuses on reworking the documentation and making small
architectural improvements before moving forward.

Added
  • Added completely new documentation.
  • Exported DUMP_SCHEMA, the default schema used by the dumper.
  • Added YAMLException.throwAt() for throwing an error at a source position.
Changed
  • Changed flat constant exports to grouped exports: EVENT_ID, SCALAR_STYLE,
    COLLECTION_STYLE, and CHOMPING_MODE, along with their value types. The old
    exports are still preserved, but deprecated.
  • Made identify mandatory for custom tag definitions. Use
    identify: () => false for load-only tags.
Deprecated
  • Deprecated flat constant exports. Use grouped ones instead.
Removed
  • Removed the MERGE_KEY export (not used anymore after last fixes).
Fixed
  • Validate << sequence items at merge time, so aliased merge sources are
    checked too.
  • Resolve << outside of a mapping key as the plain string '<<', matching
    v4, instead of leaking an internal symbol into the result.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

@dghubble-renovate dghubble-renovate Bot added dependencies Pull requests that update a dependency file npm labels Aug 14, 2026
@dghubble-renovate
dghubble-renovate Bot enabled auto-merge (squash) August 14, 2026 21:43
@dghubble-renovate
dghubble-renovate Bot merged commit 062c087 into main Aug 14, 2026
5 checks passed
@dghubble-renovate
dghubble-renovate Bot deleted the renovate/js-yaml-5.x-lockfile branch August 14, 2026 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file npm

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants