kentaro-m / auto-assign-action

An action which adds reviewers to the pull request when the pull request is opened.
MIT License
298 stars 89 forks source link

fix(deps): update dependency js-yaml to v3.14.1 #121

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
js-yaml 3.13.1 -> 3.14.1 age adoption passing confidence

Release Notes

nodeca/js-yaml ### [`v3.14.1`](https://togithub.com/nodeca/js-yaml/blob/HEAD/CHANGELOG.md#​3141---2020-12-07) [Compare Source](https://togithub.com/nodeca/js-yaml/compare/3.14.0...3.14.1) ##### Security - Fix possible code execution in (already unsafe) `.load()` (in \&anchor). ### [`v3.14.0`](https://togithub.com/nodeca/js-yaml/blob/HEAD/CHANGELOG.md#​3140---2020-05-22) [Compare Source](https://togithub.com/nodeca/js-yaml/compare/3.13.1...3.14.0) ##### Changed - Support `safe/loadAll(input, options)` variant of call. - CI: drop outdated nodejs versions. - Dev deps bump. ##### Fixed - Quote `=` in plain scalars [#​519](https://togithub.com/nodeca/js-yaml/issues/519). - Check the node type for `!` tag in case user manually specifies it. - Verify that there are no null-bytes in input. - Fix wrong quote position when writing condensed flow, [#​526](https://togithub.com/nodeca/js-yaml/issues/526).

Configuration

📅 Schedule: Branch creation - "after 4am and before 7am on saturday" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.