build(deps): Bump yaml from 2.8.3 to 2.8.4#102
Conversation
athena-omt
left a comment
There was a problem hiding this comment.
Approved. I verified the branch diff is limited to the yaml dependency bump and corresponding pnpm lockfile updates. The new yaml@2.8.4 package remains compatible with the repo's Node engine, and the PR's CI/status checks are green, including tests and runner contract checks. I do not see a correctness or merge-readiness blocker for this Dependabot patch update.
aecde29 to
20fc0d4
Compare
Bumps [yaml](https://github.com/eemeli/yaml) from 2.8.3 to 2.8.4. - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.8.3...v2.8.4) --- updated-dependencies: - dependency-name: yaml dependency-version: 2.8.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
20fc0d4 to
a5a79ff
Compare
athena-omt
left a comment
There was a problem hiding this comment.
Approved. I re-synced the worker worktree to the actual PR head (a5a79ffc) after noticing the local branch was stale, then compared it against current origin/main. The effective diff is limited to package.json and pnpm-lock.yaml, updating yaml to 2.8.4 and the associated lockfile peer-resolution strings. The package still supports this repo's Node range (>=14.6 upstream), and I do not see a correctness, scope, or architecture blocker. Live checks were still partly queued/in progress during review, so merge should still wait for required CI to finish green.
Bumps yaml from 2.8.3 to 2.8.4.
Release notes
Sourced from yaml's releases.
Commits
ccdf7432.8.4f625789fix: Disable alias resolution with maxAliasCount:0 (#677)e1a1a77fix: Handle invalid unicode escapesa163ea0style: Satify Prettierb2a5a6cfix: Apply minFractionDigits only to decimal strings (#676)93c951bchore: Bump JSR version to v2.8.3 (#673)0f226a3docs: Add trailingComma ToString option