This patch release includes a fix for an error that could be thrown in parseDocument for degenerate input. Otherwise, it's a patch release uplifting a few fixes from the ongoing v2.3 work to v2.2:
Corner case failure in error pretty-printer (CVE-2023-2251)
Use correct argument order when stringifying flow collection comments (#443)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/fmartinou/whats-up-docker/network/alerts).
Bumps yaml to 2.2.2 and updates ancestor dependency @cucumber/cucumber. These dependencies need to be updated together.
Updates
yaml
from 2.2.1 to 2.2.2Release notes
Sourced from yaml's releases.
Commits
f21fa45
2.2.2984f578
fix: Corner case failure in error pretty-printer443e3aa
fix: First-line folding for block scalars (fixes #422)5af5d3d
fix: Use correct argument order when stringifying flow collection comments (f...Updates
@cucumber/cucumber
from 9.0.1 to 9.1.1Release notes
Sourced from
@cucumber/cucumber
's releases.Changelog
Sourced from
@cucumber/cucumber
's changelog.Commits
1c13cf9
Prepare release v9.1.11f13153
chore: attribution and changelogcbacaa8
Demo code needs to await the init to actually work. (#2279)951114c
Update yaml to v2.2.2 to remedy CVE-2023-2251 (#2281)c32b21e
Apply override to xml2js for chai-xml (#2275)c65dfe0
clarify transpiling documentation (#2244)764b7b6
Prepare release v9.1.0d599dfe
Include a less cryptic error message when trying to require an ES module (#2264)aae711c
change hashes type from any to Record<string, string> (#2270)f59ea9f
Address deprecation warning. (#2267)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/fmartinou/whats-up-docker/network/alerts).