Skip to content

Update "js-yaml" to 4.2.0 - #1802

Closed
cluick wants to merge 1 commit into
gruntjs:mainfrom
iviews:main
Closed

cluick wants to merge 1 commit into
gruntjs:mainfrom
iviews:main

Conversation

@cluick

@cluick cluick commented Jun 16, 2026

Copy link
Copy Markdown

To fix security issue GHSA-h67p-54hq-rp68

@cluick

cluick commented Jun 16, 2026

Copy link
Copy Markdown
Author

To fix issue #1802

@dasa

dasa commented Jun 29, 2026

Copy link
Copy Markdown

To fix issue #1802

typo: #1802 -> #1801

@mhassan1

mhassan1 commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

If we don't like the major upgrade, here's an alternative PR: #1803

Comment thread package.json
"grunt-legacy-util": "~2.0.1",
"iconv-lite": "~0.6.3",
"js-yaml": "~3.14.0",
"js-yaml": "^4.2.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This could be bumped to 4.3.0 for GHSA-52cp-r559-cp3m

@Krinkle

Krinkle commented Jul 23, 2026

Copy link
Copy Markdown
Member

Closing in favor of #1803.

@Krinkle Krinkle closed this Jul 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants