Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump js-yaml and ember-styleguide #889

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2023

Bumps js-yaml to 3.14.1 and updates ancestor dependency ember-styleguide. These dependencies need to be updated together.

Updates js-yaml from 3.6.1 to 3.14.1

Changelog

Sourced from js-yaml's changelog.

[3.14.1] - 2020-12-07

Security

  • Fix possible code execution in (already unsafe) .load() (in &anchor).

[3.14.0] - 2020-05-22

Changed

  • Support safe/loadAll(input, options) variant of call.
  • CI: drop outdated nodejs versions.
  • Dev deps bump.

Fixed

  • Quote = in plain scalars #519.
  • Check the node type for !<?> tag in case user manually specifies it.
  • Verify that there are no null-bytes in input.
  • Fix wrong quote position when writing condensed flow, #526.

[3.13.1] - 2019-04-05

Security

  • Fix possible code execution in (already unsafe) .load(), #480.

[3.13.0] - 2019-03-20

Security

  • Security fix: safeLoad() can hang when arrays with nested refs used as key. Now throws exception for nested arrays. #475.

[3.12.2] - 2019-02-26

Fixed

  • Fix noArrayIndent option for root level, #468.

[3.12.1] - 2019-01-05

Added

  • Added noArrayIndent option, #432.

[3.12.0] - 2018-06-02

Changed

  • Support arrow functions without a block statement, #421.

[3.11.0] - 2018-03-05

Added

  • Add arrow functions suport for !!js/function.

Fixed

  • Fix dump in bin/octal/hex formats for negative integers, #399.

... (truncated)

Commits
  • 37caaad 3.14.1 released
  • 094c0f7 dist rebuild
  • 9586ebe Avoid calling hasOwnProperty of user-controlled objects
  • 34e5072 3.14.0 released
  • 7b25c83 Browser files rebuild
  • 6f73473 Dev deps bump
  • 0c29349 Travis-CI: drop old nodejs versions
  • 10be97e fix(loader): Add support for safe/loadAll(input, options)
  • d6983dd Fix issue #526: wrong quote position writing condensed flow (#527)
  • 93fbf7d fix issue 526 (wrong quote position writing condensed flow)
  • Additional commits viewable in compare view

Updates ember-styleguide from 2.6.0-0 to 8.5.0

Release notes

Sourced from ember-styleguide's releases.

v8.5.0

What's Changed

Full Changelog: ember-learn/ember-styleguide@v8.4.0...v8.5.0

v8.4.0

Sync menu

  • Merge pull request #473 from ember-learn/sync-menu 4153db4
  • Merge branch &#39;master&#39; into sync-menu d085ff6
  • Merge pull request #474 from ember-learn/ember-string-release d002938
  • Add @​ember/string to ember-release dependencies cd346de
  • Sync menu content from ember-website to styleguide a5afd24

ember-learn/ember-styleguide@v8.3.0...v8.4.0

8.3.0

  • Release 8.3.0 a7b85fa
  • Merge pull request #464 from ember-learn/change-width-sidebar e3c01f9
  • Fix tests 2b20925
  • Increase width sidebar 199ae23

ember-learn/ember-styleguide@v8.2.0...v8.3.0

v8.2.0

What's Changed

... (truncated)

Changelog

Sourced from ember-styleguide's changelog.

8.5.0 / 2023-08-31

8.4.0 / 2023-07-25

8.3.0 / 2023-06-29

8.2.0 / 2023-04-15

8.1.0 / 2023-04-07

8.0.1 / 2023-03-31

8.0.0 / 2023-03-20

7.1.0 / 2022-07-26

... (truncated)

Commits
  • 15bae44 8.5.0
  • 64069dc update changelog
  • eadd4ae Merge pull request #481 from ember-learn/dependabot/npm_and_yarn/pnpm-7.33.4
  • 128f3b6 Bump pnpm from 7.30.5 to 7.33.4
  • 4281325 Merge pull request #479 from ember-learn/volta-pin
  • 1c166e8 Merge pull request #478 from ember-learn/sidebar-cleanup
  • f6fb2a9 Pin node version in volta so that it runs for people who have node 18
  • 63702c6 Adds documentation
  • d32a300 Add sidebar-container--border-right class
  • 178631b Add sidebar-container--full-width class
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 3.14.1 and updates ancestor dependency [ember-styleguide](https://github.com/ember-learn/ember-styleguide). These dependencies need to be updated together.


Updates `js-yaml` from 3.6.1 to 3.14.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.6.1...3.14.1)

Updates `ember-styleguide` from 2.6.0-0 to 8.5.0
- [Release notes](https://github.com/ember-learn/ember-styleguide/releases)
- [Changelog](https://github.com/ember-learn/ember-styleguide/blob/master/CHANGELOG.md)
- [Commits](ember-learn/ember-styleguide@v2.6.0-0...v8.5.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-type: indirect
- dependency-name: ember-styleguide
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants