diff --git a/.pnp.cjs b/.pnp.cjs index de9373a8d7f9..589dcaad06df 100755 --- a/.pnp.cjs +++ b/.pnp.cjs @@ -9822,7 +9822,7 @@ const RAW_RUNTIME_STATE = "packageDependencies": [\ ["@types/js-yaml", "npm:3.12.5"],\ ["@yarnpkg/parsers", "workspace:packages/yarnpkg-parsers"],\ - ["js-yaml", "npm:3.14.1"],\ + ["js-yaml", "npm:4.1.0"],\ ["pegjs", "npm:0.10.0"],\ ["tslib", "npm:2.6.2"]\ ],\ diff --git a/.yarn/versions/20f8e43c.yml b/.yarn/versions/20f8e43c.yml new file mode 100644 index 000000000000..64cf68edf32a --- /dev/null +++ b/.yarn/versions/20f8e43c.yml @@ -0,0 +1,35 @@ +releases: + "@yarnpkg/builder": patch + "@yarnpkg/cli": patch + "@yarnpkg/core": patch + "@yarnpkg/doctor": patch + "@yarnpkg/extensions": patch + "@yarnpkg/nm": patch + "@yarnpkg/parsers": minor + "@yarnpkg/plugin-compat": patch + "@yarnpkg/plugin-constraints": patch + "@yarnpkg/plugin-dlx": patch + "@yarnpkg/plugin-essentials": patch + "@yarnpkg/plugin-exec": patch + "@yarnpkg/plugin-file": patch + "@yarnpkg/plugin-git": patch + "@yarnpkg/plugin-github": patch + "@yarnpkg/plugin-http": patch + "@yarnpkg/plugin-init": patch + "@yarnpkg/plugin-interactive-tools": patch + "@yarnpkg/plugin-jsr": patch + "@yarnpkg/plugin-link": patch + "@yarnpkg/plugin-nm": patch + "@yarnpkg/plugin-npm": patch + "@yarnpkg/plugin-npm-cli": patch + "@yarnpkg/plugin-pack": patch + "@yarnpkg/plugin-patch": patch + "@yarnpkg/plugin-pnp": patch + "@yarnpkg/plugin-pnpm": patch + "@yarnpkg/plugin-stage": patch + "@yarnpkg/plugin-typescript": patch + "@yarnpkg/plugin-version": patch + "@yarnpkg/plugin-workspace-tools": patch + "@yarnpkg/pnpify": patch + "@yarnpkg/sdks": patch + "@yarnpkg/shell": patch diff --git a/packages/yarnpkg-parsers/package.json b/packages/yarnpkg-parsers/package.json index 69e56bf88641..69b6590ce506 100644 --- a/packages/yarnpkg-parsers/package.json +++ b/packages/yarnpkg-parsers/package.json @@ -8,7 +8,7 @@ "./package.json": "./package.json" }, "dependencies": { - "js-yaml": "^3.10.0", + "js-yaml": "^4.1.0", "tslib": "^2.4.0" }, "devDependencies": { diff --git a/packages/yarnpkg-parsers/sources/syml.ts b/packages/yarnpkg-parsers/sources/syml.ts index b4e81d9cc321..ab6b2ce9bceb 100644 --- a/packages/yarnpkg-parsers/sources/syml.ts +++ b/packages/yarnpkg-parsers/sources/syml.ts @@ -1,6 +1,6 @@ -import {safeLoad, FAILSAFE_SCHEMA} from 'js-yaml'; +import {load, FAILSAFE_SCHEMA} from 'js-yaml'; -import {parse} from './grammars/syml'; +import {parse} from './grammars/syml'; const simpleStringPattern = /^(?![-?:,\][{}#&*!|>'"%@` \t\r\n]).([ \t]*(?![,\][{}:# \t\r\n]).)*$/; @@ -139,7 +139,7 @@ function parseViaJsYaml(source: string) { if (LEGACY_REGEXP.test(source)) return parseViaPeg(source); - const value = safeLoad(source, { + const value = load(source, { schema: FAILSAFE_SCHEMA, json: true, }); diff --git a/yarn.lock b/yarn.lock index 459ace878a39..ab21dcf292ce 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5923,7 +5923,7 @@ __metadata: resolution: "@yarnpkg/parsers@workspace:packages/yarnpkg-parsers" dependencies: "@types/js-yaml": "npm:^3.11.1" - js-yaml: "npm:^3.10.0" + js-yaml: "npm:^4.1.0" pegjs: "npm:^0.10.0" tslib: "npm:^2.4.0" languageName: unknown @@ -13956,7 +13956,7 @@ __metadata: languageName: node linkType: hard -"js-yaml@npm:^3.10.0, js-yaml@npm:^3.13.1": +"js-yaml@npm:^3.13.1": version: 3.14.1 resolution: "js-yaml@npm:3.14.1" dependencies: