Skip to content

Bump yaml from 1.10.2 to 2.8.1#2085

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/yaml-2.8.1
Closed

Bump yaml from 1.10.2 to 2.8.1#2085
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/yaml-2.8.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 15, 2026

Bumps yaml from 1.10.2 to 2.8.1.

Release notes

Sourced from yaml's releases.

v2.8.1

  • Preserve empty block literals (#634)

v2.8.0

  • Add node cache for faster alias resolution (#612)
  • Re-introduce compatibility with Node.js 14.6 (#614)
  • Add --merge option to CLI tool (#611)
  • Improve error for tag resolution error on null value (#616)
  • Allow empty string as plain scalar representation, for failsafe schema (#616)
  • docs: include cli example (#617)

v2.7.1

  • Do not allow seq with single-line collection value on same line with map key (#603)
  • Improve warning & avoid TypeError on bad YAML 1.1 nodes (#610)

v2.7.0

The library is now available on JSR as @​eemeli/yaml and on deno.land/x as yaml. In addition to Node.js and browsers, it should work in Deno, Bun, and Cloudflare Workers.

  • Use .ts extension in all relative imports (#591)
  • Ignore newline after block seq indicator as space before value (#590)
  • Require Node.js 14.18 or later (was 14.6) (#598)

v2.6.1

  • Do not strip :00 seconds from !!timestamp values (#578, with thanks to @​qraynaud)
  • Tighten regexp for JSON !!bool (#587, with thanks to @​vra5107)
  • Default to literal block scalar if folded would overflow (#585)

v2.6.0

  • Use a proper tag for !!merge << keys (#580)
  • Add stringKeys parse option (#581)
  • Stringify a Document as a Document (#576)
  • Add sponsorship by Manifest

v2.5.1

  • Include range in flow sequence pair maps (#573)

v2.5.0

  • Add --indent option to CLI tool (#559, with thanks to @​danielbayley)
  • Require newline in all cases for props on block sequence (#557)
  • Always reset indentation in lexer on ... (#558)
  • Ignore minContentWidth if greater than lineWidth (#562)
  • Drop unused Collection.maxFlowStringSingleLineLength (#522, #421)

v2.4.5

  • Improve tab handling (#553, yaml-test-suite tests DK95 & Y79Y)

v2.4.4

With special thanks to @​RedCMD for finding and reporting all of the following:

  • Allow comment after top-level block scalar with explicit indent indicator (#547)

... (truncated)

Commits
  • 1dc3c3b 2.8.1
  • 5bbb1cb chore: Add explicit jest-resolve@29 dev dependency to keep Node.js 15 compati...
  • b3ba632 chore: Refresh lockfile
  • de8a0ab fix: Preserve empty block literals (#634)
  • 81eb3bf docs: Update site intro
  • ef23196 docs: Update README & docs/CONTRIBUTING
  • aa29f42 docs: Note that schema can be a Schema
  • cad823e docs: Update instructions on vulnerability reporting
  • c000eb7 2.8.0
  • 1e85fc8 style: Apply updated lint rules
  • Additional commits viewable in compare view

Copilot AI review requested due to automatic review settings May 15, 2026 13:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 15, 2026
@github-project-automation github-project-automation Bot moved this to Backlog (Not Ready) in DevX May 15, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Bumps [yaml](https://github.com/eemeli/yaml) from 1.10.2 to 2.8.1.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v1.10.2...v2.8.1)

---
updated-dependencies:
- dependency-name: yaml
  dependency-version: 2.8.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/yaml-2.8.1 branch from 8ca338a to 504cc72 Compare May 15, 2026 20:06
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 26, 2026

Looks like yaml is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this May 26, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/yaml-2.8.1 branch May 26, 2026 23:18
@github-project-automation github-project-automation Bot moved this from Backlog (Not Ready) to Done in DevX May 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant