Skip to content

chore(deps): bump js-yaml from 3.14.2 to 3.15.0 - #225

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.0
Closed

chore(deps): bump js-yaml from 3.14.2 to 3.15.0#225
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 3.14.2 to 3.15.0.

Changelog

Sourced from js-yaml's changelog.

4.3.0, 3.15.0 - 2026-06-27

Security

  • Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.
  • Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

  • maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

  • Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

  • Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

  • [breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

  • Added named exports for schemas, tags, parser events and AST utilities.
  • Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.
  • Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.
  • Added dump() transform option for changing the generated AST before rendering.
  • Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.
  • Added formal data layers (events and AST) for modular data pipelines.
    • Added low-level parser (to events), presenter and visitor APIs.
  • Added the YAML Test Suite to the test set.

Changed

  • See the migration guide for upgrade notes.
  • Rewritten in TypeScript and reorganized the public API around flat named exports.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.2 to 3.15.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.2...3.15.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 29, 2026

@adesege adesege left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Benchmark

Details
Benchmark suite Current: 1789195 Previous: 7abf1a4 Ratio
test/benchmarks/request-response.bench.ts > Request/Response > simple GET - 200 67058.86187699468 ops/sec (±1.02%) 50159.54786183608 ops/sec (±1.20%) 0.75
test/benchmarks/request-response.bench.ts > Request/Response > GET with route params - 200 61603.718224593395 ops/sec (±0.76%) 48788.542100785955 ops/sec (±0.78%) 0.79
test/benchmarks/request-response.bench.ts > Request/Response > POST with JSON body - 201 28363.7248151423 ops/sec (±1.12%) 16324.656937824655 ops/sec (±1.20%) 0.58
test/benchmarks/request-response.bench.ts > Request/Response > POST invalid body - validation error 4029.3055330742136 ops/sec (±4.35%) 3767.6341525889247 ops/sec (±3.58%) 0.94
test/benchmarks/request-response.bench.ts > Request/Response > GET unknown route - 404 8192.88529241284 ops/sec (±1.49%) 6465.66593197288 ops/sec (±1.25%) 0.79
src/__benchmarks__/application.bench.ts > Application - Bootstrap > constructor only 377820.9700600165 ops/sec (±0.58%) 376306.82818050386 ops/sec (±0.43%) 1.00
src/__benchmarks__/application.bench.ts > Application - Bootstrap > full initialize() 43469.12853091212 ops/sec (±2.54%) 38183.21846588412 ops/sec (±0.93%) 0.88
src/__benchmarks__/application.bench.ts > Application - Service Resolution > resolve service after bootstrap 45780.25934297911 ops/sec (±2.95%) 38777.470454862014 ops/sec (±2.52%) 0.85
src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > initialize with 5 controllers (8 routes) 47925.5869772876 ops/sec (±0.81%) 44139.17336156522 ops/sec (±0.72%) 0.92
src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > resolve service after multi-controller bootstrap 47187.78208681743 ops/sec (±0.96%) 43671.34722128782 ops/sec (±0.74%) 0.93
src/di/__benchmarks__/container.bench.ts > Container - Registration > register class provider 4078916.450009494 ops/sec (±1.81%) 4378267.089319942 ops/sec (±1.57%) 1.07
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerSingleton 4057347.0586932222 ops/sec (±2.13%) 3996288.7611478744 ops/sec (±2.06%) 0.98
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerValue 4342173.261824775 ops/sec (±2.34%) 4685169.337081629 ops/sec (±1.56%) 1.08
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerFactory 4437335.760380075 ops/sec (±1.59%) 4760014.600562802 ops/sec (±0.71%) 1.07
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve class token 1412565.9604466262 ops/sec (±0.61%) 1398230.3724598626 ops/sec (±0.42%) 0.99
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve symbol token 1442303.976925584 ops/sec (±2.24%) 1442223.1433174785 ops/sec (±0.42%) 1.00
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve value token 1967542.9847497023 ops/sec (±1.49%) 1916660.9496722054 ops/sec (±0.17%) 0.97
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve singleton token 1356319.877930992 ops/sec (±0.59%) 1366570.6662249872 ops/sec (±0.46%) 1.01
src/di/__benchmarks__/container.bench.ts > Container - Resolution > isRegistered check 2053796.3610689554 ops/sec (±0.24%) 2060612.6441198322 ops/sec (±0.22%) 1.00
src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when().use().give().otherwise() 2395727.9377067033 ops/sec (±3.28%) 2448987.8334662053 ops/sec (±3.52%) 1.02
src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when() with cached predicate 2390325.541057019 ops/sec (±2.05%) 2405055.4643926523 ops/sec (±0.62%) 1.01
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register single module 1280424.227600736 ops/sec (±0.80%) 1340462.7024322296 ops/sec (±0.71%) 1.05
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register 3-level module tree 675694.4377944324 ops/sec (±0.58%) 666424.4474642557 ops/sec (±0.39%) 0.99
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register dynamic module (forRoot) 1146146.6223318137 ops/sec (±0.51%) 1183561.6330960623 ops/sec (±0.35%) 1.03
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Initialization > initialize with lifecycle hooks 788661.511029684 ops/sec (±0.84%) 851155.870407782 ops/sec (±0.55%) 1.08
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllControllers 602124.0346672927 ops/sec (±0.59%) 590249.3046864584 ops/sec (±2.29%) 0.98
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllConsumers 601091.1296201182 ops/sec (±0.44%) 604495.8718469703 ops/sec (±0.29%) 1.01
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllJobs 600817.7788990252 ops/sec (±0.43%) 593957.25042619 ops/sec (±1.36%) 0.99
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register controller with 5 OpenAPI routes 12139.373802541799 ops/sec (±7.38%) 8391.603815600616 ops/sec (±6.55%) 0.69
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register single-route controller 61524.73170304579 ops/sec (±7.97%) 48315.360497889866 ops/sec (±7.22%) 0.79
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register multiple controllers 12318.886003138594 ops/sec (±6.43%) 10884.969280489046 ops/sec (±5.37%) 0.88
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 10 routes by specificity 365155.83860114374 ops/sec (±0.76%) 332313.5088406572 ops/sec (±1.51%) 0.91
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 50 routes by specificity 63623.668138950256 ops/sec (±1.91%) 60216.679809510286 ops/sec (±0.68%) 0.95
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 100 routes by specificity 32690.059648821425 ops/sec (±0.49%) 31479.58270665301 ops/sec (±0.35%) 0.96
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - static path 12549287.422752785 ops/sec (±0.18%) 12502380.574745644 ops/sec (±0.12%) 1.00
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - single param 2092716.6020660053 ops/sec (±0.36%) 1807787.3853475987 ops/sec (±0.48%) 0.86
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - multiple params 1474338.248485273 ops/sec (±0.53%) 1346117.2569435074 ops/sec (±0.60%) 0.91

This comment was automatically generated by workflow using github-action-benchmark.

@dependabot @github

dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #252.

@dependabot dependabot Bot closed this Aug 4, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/js-yaml-3.15.0 branch August 4, 2026 12:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant