Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 15, 2025

Bumps js-yaml from 4.1.0 to 4.1.1.

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 15, 2025
@github-actions
Copy link
Contributor

Test results for "MCP"

2432 passed, 116 skipped


Merge workflow run.

@github-actions
Copy link
Contributor

Test results for "tests 1"

4 flaky ⚠️ [chromium-library] › library/beforeunload.spec.ts:130 › should support dismissing the dialog multiple times `@chromium-ubuntu-22.04-node24`
⚠️ [chromium-library] › library/popup.spec.ts:258 › should not throw when click closes popup `@chromium-ubuntu-22.04-node24`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-ubuntu-22.04-node18`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-ubuntu-22.04-node18`

40311 passed, 787 skipped


Merge workflow run.

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

@github-actions
Copy link
Contributor

Test results for "tests 2"

4 fatal errors, not part of any test
1 failed
❌ [chromium-library] › library/chromium/extensions.spec.ts:72 › MV3 › should support request/response events in the service worker @msedge-windows-latest

72 flaky ⚠️ [chromium-library] › library/permissions.spec.ts:244 › should be able to use the local-fonts API `@channel-chromium-macos-latest`
⚠️ [chromium-library] › library/global-fetch.spec.ts:341 › should json stringify array body when content-type is application/json `@chrome-beta-macos-latest`
⚠️ [chromium-library] › library/beforeunload.spec.ts:130 › should support dismissing the dialog multiple times `@chrome-macos-latest`
⚠️ [chromium-library] › library/permissions.spec.ts:244 › should be able to use the local-fonts API `@chrome-macos-latest`
⚠️ [chromium-page] › page/workers.spec.ts:25 › Page.workers @smoke `@chrome-macos-latest`
⚠️ [chromium-page] › page/workers.spec.ts:186 › should report network activity `@chrome-macos-latest`
⚠️ [chromium-page] › page/workers.spec.ts:307 › should support extra http headers `@chrome-macos-latest`
⚠️ [chromium-library] › library/chromium/connect-over-cdp.spec.ts:181 › should connect to existing service workers `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/chromium/extensions.spec.ts:72 › MV3 › should support request/response events in the service worker `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/inspector/cli-codegen-pick-locator.spec.ts:35 › should update locator highlight `@chromium-headed-macos-14-xlarge`
⚠️ [chromium-library] › library/browsercontext-reuse.spec.ts:270 › reuse launch › should reset mouse position `@chromium-headed-ubuntu-24.04`
⚠️ [chromium-library] › library/inspector/cli-codegen-1.spec.ts:1086 › cli codegen › should clear when recording is disabled `@chromium-headed-ubuntu-24.04`
⚠️ [chromium-page] › page/page-drag.spec.ts:390 › should work if not doing a drag `@chromium-headed-windows-latest`
⚠️ [chromium-library] › library/popup.spec.ts:258 › should not throw when click closes popup `@chromium-tip-of-tree-headless-shell-ubuntu-22.04`
⚠️ [chromium-library] › library/browsercontext-reuse.spec.ts:270 › reuse launch › should reset mouse position `@chromium-tip-of-tree-ubuntu-22.04--headed`
⚠️ [chromium-library] › library/inspector/cli-codegen-1.spec.ts:94 › cli codegen › should click twice `@chromium-tip-of-tree-ubuntu-22.04--headed`
⚠️ [chromium-library] › library/inspector/cli-codegen-3.spec.ts:672 › cli codegen › should consume contextmenu events, despite a custom context menu `@chromium-tip-of-tree-ubuntu-22.04--headed`
⚠️ [chromium-page] › page/page-drag.spec.ts:303 › Drag and drop › should dragTo with tweened mouse movement `@chromium-tip-of-tree-windows-latest--headed`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-beta-macos-latest`
⚠️ [firefox-page] › page/page-goto.spec.ts:83 › should work with Cross-Origin-Opener-Policy `@firefox-beta-macos-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-beta-ubuntu-22.04`
⚠️ [firefox-page] › page/page-screenshot.spec.ts:868 › page screenshot animations › should wait for fonts to load `@firefox-beta-ubuntu-22.04`
⚠️ [firefox-library] › library/browsercontext-reuse.spec.ts:195 › reuse connect › should not cache resources `@firefox-beta-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-beta-windows-latest`
⚠️ [firefox-library] › library/trace-viewer.spec.ts:1046 › should highlight expect failure `@firefox-beta-windows-latest`
⚠️ [firefox-library] › library/browsercontext-basic.spec.ts:377 › should emulate media in cross-process iframe `@firefox-headed-macos-14-xlarge`
⚠️ [firefox-library] › library/capabilities.spec.ts:244 › requestFullscreen `@firefox-headed-macos-14-xlarge`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-headed-macos-14-xlarge`
⚠️ [firefox-library] › library/browsercontext-reuse.spec.ts:114 › reuse launch › should reset serviceworker `@firefox-headed-ubuntu-24.04`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-headed-ubuntu-24.04`
⚠️ [firefox-library] › library/browsercontext-page-event.spec.ts:160 › should work with Shift-clicking `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/browsercontext-route.spec.ts:211 › should work if handler with times parameter was removed from another handler `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/browsercontext-route.spec.ts:269 › should chain fallback `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/hit-target.spec.ts:244 › should not click iframe overlaying the target `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:984 › cli codegen › should record slider `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1055 › cli codegen › should record omnibox navigations after performAction `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-3.spec.ts:148 › cli codegen › should generate frame locators (2) `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-csharp.spec.ts:202 › should not print context options method override in mstest if no options were passed `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/tracing.spec.ts:264 › should not include trace resources from the previous chunks `@firefox-headed-windows-latest`
⚠️ [firefox-page] › page/page-click-timeout-3.spec.ts:39 › should timeout waiting for hit target `@firefox-headed-windows-latest`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-macos-14-large`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-macos-14-large`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-macos-14-xlarge`
⚠️ [firefox-page] › page/page-emulate-media.spec.ts:144 › should keep reduced motion and color emulation after reload `@firefox-macos-14-xlarge`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-macos-15-large`
⚠️ [firefox-page] › page/page-event-request.spec.ts:182 › should return response body when Cross-Origin-Opener-Policy is set `@firefox-macos-15-large`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-macos-15-xlarge`
⚠️ [firefox-page] › page/page-event-request.spec.ts:182 › should return response body when Cross-Origin-Opener-Policy is set `@firefox-macos-15-xlarge`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-ubuntu-24.04`
⚠️ [firefox-page] › page/page-emulate-media.spec.ts:144 › should keep reduced motion and color emulation after reload `@firefox-ubuntu-24.04`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@firefox-windows-latest`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@firefox-windows-latest`
⚠️ [chromium-library] › library/video.spec.ts:378 › screencast › should capture navigation `@msedge-beta-windows-latest`
⚠️ [chromium-library] › library/video.spec.ts:162 › screencast › should work with old options `@msedge-dev-windows-latest`
⚠️ [chromium-library] › library/video.spec.ts:579 › screencast › should capture static page in persistent context @smoke `@msedge-dev-windows-latest`
⚠️ [chromium-library] › library/video.spec.ts:378 › screencast › should capture navigation `@msedge-macos-latest`
⚠️ [chromium-library] › library/browsercontext-proxy.spec.ts:103 › should set cookie for top-level domain `@msedge-windows-latest`
⚠️ [chromium-library] › library/defaultbrowsercontext-2.spec.ts:161 › should have passed URL when launching with ignoreDefaultArgs: true `@tracing-chromium-tip-of-tree`
⚠️ [firefox-library] › library/inspector/cli-codegen-1.spec.ts:1079 › cli codegen › should not throw csp directive violation errors `@tracing-firefox`
⚠️ [firefox-page] › page/page-event-request.spec.ts:182 › should return response body when Cross-Origin-Opener-Policy is set `@tracing-firefox`
⚠️ [firefox-page] › page/page-wait-for-function.spec.ts:104 › should work with strict CSP policy `@tracing-firefox`
⚠️ [webkit-library] › library/video.spec.ts:378 › screencast › should capture navigation `@tracing-webkit`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:321 › cli codegen › should fill `@webkit-headed-ubuntu-24.04`
⚠️ [webkit-library] › library/browsercontext-reuse.spec.ts:114 › reuse launch › should reset serviceworker `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:536 › cli codegen › should emit single keyup on ArrowDown `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-1.spec.ts:759 › cli codegen › should await popup `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/inspector/cli-codegen-3.spec.ts:805 › cli codegen › should assert value on disabled input `@webkit-headed-windows-latest`
⚠️ [webkit-library] › library/video.spec.ts:378 › screencast › should capture navigation `@webkit-headed-windows-latest`
⚠️ [webkit-page] › page/wheel.spec.ts:70 › should dispatch wheel events after context menu was opened `@webkit-macos-15-large`
⚠️ [webkit-page] › page/wheel.spec.ts:70 › should dispatch wheel events after context menu was opened `@webkit-macos-15-xlarge`
⚠️ [webkit-library] › library/browsercontext-reuse.spec.ts:114 › reuse launch › should reset serviceworker `@webkit-windows-latest`
⚠️ [webkit-library] › library/video.spec.ts:378 › screencast › should capture navigation `@webkit-windows-latest`

256036 passed, 10025 skipped


Merge workflow run.

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

@github-actions

This comment has been minimized.

@github-actions
Copy link
Contributor

Test results for "tests others"

2 fatal errors, not part of any test

1 interrupted ⚠️ [electron-page] › page/page-history.spec.ts:249 › regression test for issue 20791 `@electron-macos-latest`

19429 passed, 475 skipped, 884 did not run


Merge workflow run.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 17, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/js-yaml-4.1.1 branch November 17, 2025 19:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants