From d3d268686ddad306775a1227c54e8e802c5ddf56 Mon Sep 17 00:00:00 2001 From: Kevin Verhoef Date: Mon, 17 Nov 2025 13:10:25 +0100 Subject: [PATCH 1/2] Update to js-yaml to fix a security issue. For more info see: https://github.com/nodeca/js-yaml/security/advisories/GHSA-mh29-5h37-fv8m --- package.json | 2 +- yarn.lock | 7 +++++++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index f91d182..04fff00 100644 --- a/package.json +++ b/package.json @@ -65,7 +65,7 @@ }, "dependencies": { "case": "^1.6.3", - "js-yaml": "^4.1.0", + "js-yaml": "^4.1.1", "lodash.merge": "^4.6.2", "projen": "^0.88.2" }, diff --git a/yarn.lock b/yarn.lock index 1e72c4f..9a5c64b 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3812,6 +3812,13 @@ js-yaml@^4.1.0: dependencies: argparse "^2.0.1" +js-yaml@^4.1.1: + version "4.1.1" + resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.1.tgz#854c292467705b699476e1a2decc0c8a3458806b" + integrity sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA== + dependencies: + argparse "^2.0.1" + jsdom@^25.0.0: version "25.0.1" resolved "https://registry.yarnpkg.com/jsdom/-/jsdom-25.0.1.tgz#536ec685c288fc8a5773a65f82d8b44badcc73ef" From d1e3b0af8711912f3c8088cd74af144ad1aa3544 Mon Sep 17 00:00:00 2001 From: Kevin Verhoef Date: Mon, 17 Nov 2025 18:40:44 +0100 Subject: [PATCH 2/2] Removed projen from devdepencies --- package.json | 3 +-- yarn.lock | 2 +- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index 9734b60..283e056 100644 --- a/package.json +++ b/package.json @@ -69,8 +69,7 @@ "dependencies": { "case": "^1.6.3", "js-yaml": "^4.1.1", - "lodash.merge": "^4.6.2", - "projen": "^0.88.2" + "lodash.merge": "^4.6.2" }, "bundledDependencies": [ "case", diff --git a/yarn.lock b/yarn.lock index 9bbeb31..779362b 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3948,7 +3948,7 @@ js-yaml@^4.1.1: dependencies: argparse "^2.0.1" -jsdom@^25.0.0: +jsdom@^25.0.1: version "25.0.1" resolved "https://registry.yarnpkg.com/jsdom/-/jsdom-25.0.1.tgz#536ec685c288fc8a5773a65f82d8b44badcc73ef" integrity sha512-8i7LzZj7BF8uplX+ZyOlIz86V6TAsSs+np6m1kpW9u0JWi4z/1t+FzcK1aek+ybTnAC4KhBL4uXCNT0wcUIeCw==