Snyk has created this PR to upgrade yaml from 1.9.2 to 1.10.0.
β¨What is Merge Advice?
We check thousands of dependency upgrade pull requests and CI tests every day to see which upgrades were successfully merged. After crunching this data, we give a recommendation on how safe we think the change is for you to merge without causing issues. Learn more, and share your feedback to help improve this feature. π
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released 3 days ago, on 2020-05-16.
This will probably be the last minor release of yaml@1. I'm aiming to release yaml@2 within a few months; prereleases of that will be published using the next dist-tag on npm. Patch releases for 1.10 may still happen, if necessary.
This removes most of the internal dist/ paths from the release. If you want/need to use a class or function that is no longer public, please file an issue and we can add it to the exports.
Drop dependency on @babel/runtime. After this, the package has 0 runtime dependencies. π
Add exports { Alias, Collection, Merge, Node } to 'yaml/types'
Document Schema.createPair() & make its ctx arg optional (#157)
Always indent top-level scalars with lines starting with document markers or % directives (#162)
Use double-space when forcing top-level block scalar indent, for clarity (#162)
Coverage remained the same at 100.0% when pulling 8a68137824f378e2379583df6a62301e89c5f2fb on snyk-upgrade-eb877bc4624270594ed84b83b9b2faea into 958e699cf4dd0293f05067a23f10743578ff9e96 on master.
Snyk has created this PR to upgrade yaml from 1.9.2 to 1.10.0.
β¨What is Merge Advice?
We check thousands of dependency upgrade pull requests and CI tests every day to see which upgrades were successfully merged. After crunching this data, we give a recommendation on how safe we think the change is for you to merge without causing issues. Learn more, and share your feedback to help improve this feature. π:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: yaml
This will probably be the last minor release of
yaml@1
. I'm aiming to releaseyaml@2
within a few months; prereleases of that will be published using thenext
dist-tag on npm. Patch releases for 1.10 may still happen, if necessary.New Features
dist/
paths from the release. If you want/need to use a class or function that is no longer public, please file an issue and we can add it to the exports.@babel/runtime
. After this, the package has 0 runtime dependencies.{ Alias, Collection, Merge, Node }
to 'yaml/types'Schema.createPair()
& make itsctx
arg optional (#157)getNodes(): string[]
method to Anchors (#166)dist/
endpointsImproved Errors & Warnings
npm start
debuggingImproved TypeScript declarations
AST.{AstNode,ScalarNode,CollectionNode}
(#160)toString()
methods to AST nodes (#159)Bugfixes
mapAsMap: true
for out.yaml tests (4FJ6)Node.toJSON()
type (#154)Commit messages
Package name: yaml
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
π§ View latest project report
π Adjust upgrade PR settings
π Ignore this dependency or unsubscribe from future upgrade PRs