Skip to content

chore: upgrade js-yaml to 4.3.2 to address CVE-2026-84375 #1636

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
brendan-kellam merged 6 commits into from
Sep 9, 2026
Merged

chore: upgrade js-yaml to 4.3.2 to address CVE-2026-84375 #1636

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
7f588eb
chore: upgrade js-yaml to ^4.3.1 to address GHSA-5p4m-2wfm-xmqj
github-actions[bot] Aug 7, 2026
1675110
chore: add CHANGELOG entry for js-yaml upgrade
github-actions[bot] Aug 7, 2026
a0f1f95
chore: upgrade js-yaml to 4.3.2 to address CVE-2026-84375
github-actions[bot] Sep 9, 2026
245f348
Merge stale remote cursor/cve/js-yaml branch (its content already lan…
github-actions[bot] Sep 9, 2026
9a829c5
chore: add CHANGELOG entry for js-yaml upgrade
github-actions[bot] Sep 9, 2026
0952740
Merge branch 'main' into cursor/cve/js-yaml
brendan-kellam Sep 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- Upgraded `postcss-selector-parser` to `^6.1.4`. [#1625](https://github.com/sourcebot-dev/sourcebot/pull/1625)
- Upgraded `fast-uri` to `3.1.7`. [#1626](https://github.com/sourcebot-dev/sourcebot/pull/1626)
- Upgraded `qs` to `6.16.0`. [#1627](https://github.com/sourcebot-dev/sourcebot/pull/1627)
- Upgraded `js-yaml` to `4.3.2`. [#1636](https://github.com/sourcebot-dev/sourcebot/pull/1636)
- Upgraded `@humanfs/node` to `0.16.8`. [#1630](https://github.com/sourcebot-dev/sourcebot/pull/1630)
- Upgraded `fflate` to `0.4.9`. [#1629](https://github.com/sourcebot-dev/sourcebot/pull/1629)

Expand Down
6 changes: 3 additions & 3 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16483,13 +16483,13 @@ __metadata:
linkType: hard

"js-yaml@npm:^4.1.1":
version: 4.3.1
resolution: "js-yaml@npm:4.3.1"
version: 4.3.2
resolution: "js-yaml@npm:4.3.2"
dependencies:
argparse: "npm:^2.0.1"
bin:
js-yaml: bin/js-yaml.js
checksum: 10c0/13c500ca322e0c3f8c81686e6ecda96d2ea37b45247a420c17c7db36932d6965cc27391abc2d1a104501600e7f0d947a5f8b7be6db619c4fefa87901b3512807
checksum: 10c0/dedd34c2e8fef1d504687f1bc94ed0ee1311a1f78770fa2800352c6d59c635ccf555009d74e9afe529ae62199da2b1ccef30e53dc84dcd8d2d8187c22574bc97
languageName: node
linkType: hard

Expand Down
Loading