Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 15, 2025

Bumps js-yaml to 4.1.1 and updates ancestor dependencies js-yaml, knip and mocha. These dependencies need to be updated together.

Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates knip from 5.6.1 to 5.69.1

Release notes

Sourced from knip's releases.

Release 5.69.1

  • Release @​knip/create-config 1.0.8 (87405169656dbfa8cf931092d516c91647f95529)
  • Edit docs (5eb8a6943904505b5630dee1ee58379c7707f72d)
  • Apply Next.js page extensions to app directory (#1351) (f9cf9dc0fd44880a515979a104261ed77fa8878d) - thanks @​remcohaszing!
  • Refactor fixes & consistently use issue.fixes (d7b45cfebb135881160ecda2acf0ad5239d98441)
  • Revive some tests in Bun (74a0bd8ebf6e68e121333489495d2b6d58545fd4)
  • Fix import identifier/specifier pos (95d2c04d5400ffb57f9057653c0977967b3ae02e)
  • Fix namespace import pos (6b6b80b813d545d16ba74fc68beecd492f1252a2)
  • Improve some export/import positions (9b87b1ac20fb33d9f9b5af1de1cbe1d053fa18ff)
  • Rely on absolute paths with formatly (npx acts weird) (6653f357074c559f537af1b5563b191372d7901e)

Release 5.69.0

  • Update mdxlint-preset-webpro (88e772a01022dd8a023d5f9c54fe2e1e1407565b)
  • Edit docs (c44b8bfe849e131c0a071cd67cb63e8ef1bffc30)
  • Upgrade biome (5d3d74d0cdcd507c5b9f7db2bc4c7a9896394bff)
  • Fix up issue type shorthands (88ad825f80cd8390631ea6a67db35a28d21d6a0c)
  • Improve zod error message (208381009cf99a15c0b1fe3feecbc202cbe4d7a1)
  • Correct mdxlint setup in package.json (#1337) (71a4d125a8450c7a9e4a5c78735bbb3c2aabdae1) - thanks @​remcohaszing!
  • (create-config): Fix regex for detecting packages in pnpm-workspace.yaml (#1342) (46e33d95f8390ca051ddc43f711724dfc2ac0e4e) - thanks @​taro-28!
  • Add missing dependency on remark-gfm (#1338) (e1462d3ca7fe65402d8eb7f9ed758129554cbdc0) - thanks @​remcohaszing!
  • feat(plugins): extend prisma plugin (#1339) (6dc700a1351c776342ca54b6968865ed3bc9fd43) - thanks @​CHC383!
  • Link to github org knip search results (2ee1f1b488150cbe848ecf2e4b4952997f43f0eb)
  • Support --format in eslint plugin (resolves #1343) (4cb18bb21419194df751e54baaab069bfdd26219)
  • mdxlint uses remark prefix (cdd21733e458693b9ca61c28289e804c26eeab48)
  • Print relative path in trace renderer (379e798b7a8e950ae5fc0c609e433987d3189ab6)
  • Allow to un-ignore wildcard ignored workspaces (b422f10229d953f4e480bdc51bbf51c531448d1e)
  • Support URL constructor with import.meta.url (resolves #1310) (ffff5a625bfd7c3f8647cdf8f326907a5089f6dc)
  • Refactor import props into modifiers (9a0ace7460cb58ab3aec632caacf1008e4cf1adc)
  • Rename method (d922df43f501b42afd93de21641247b14d6807e3)
  • Fix up KnipConfig that can be an (async) function (4310d2065bf5caab6641a7e6145d745c1a5eed3a)
  • Verify only first word for valid binary (resolve #1345) (153ced021a66c3a8cff9e6c6ca1bd9ec66ce5e05)
  • Add auto-fixable catalog issue type (#1204) (063b647951d3f446f94639921a1ca276dc27017e)
  • Refactor plugins to use Plugin type annotation (f1e8b8263656d2e7998fdeb7adf4c221312a0bbc)
  • Update some dependencies (0339f499fae08abd2fc5f4d715b83d26d5d2daea)
  • Lint & format (f606570c74b3195d7eca2160f4fc6ddc484a4784)

Release 5.68.0

  • Re-gen sponsorships chart + add link (b1ee77635954df6bd5328b65ad456c9ea1d95906)
  • Add ignoreMembers to workspace schema (#1332) (4a4687ed402b4d74be8fcc8cd73816451de4a005) - thanks @​Jiralite!
  • Deduplication in schema (#1334) (311bc8016e6e3d1cb58ae60d3a7772e5425d1333) - thanks @​Jiralite!
  • chore: fix typo in FAQ documentation (#1333) (2d6cf70032ac39bb549be52301c35d9a7e2a0bae) - thanks @​0xflotus!
  • fix: 🐛 re-support "astro:env/*" imports (#1331) (b88336b12e41ad3c5b9ec91672cd6d8294f648a1) - thanks @​jimmy-guzman!
  • Support CSpell TS configurations (#1336) (10b5ddb11f985b4669d29fc20ca51dc25de5e85c) - thanks @​azat-io!
  • Move mdx formatting to mdxlint (0077f25278c3990103d78cb3da73e416dc2d8127)
  • Format mdx (3a89d84eb38f7e84e5120cb3fe187ce9f4886927)
  • Fix plugin specifier handling in remark plugin (469883e659a691af46baa8ce68c351c31635fe78)
  • Add mdxlint plugin (5075a7b13b5e2c2b75cb17772f6d9f0f61ea2002)

Release 5.67.1

  • Restore integration test repo (7b4bd4198e8b3ecb300abdb5a53ce990e8b93313)

... (truncated)

Commits
  • 482735d Release 5.69.1
  • 6653f35 Rely on absolute paths with formatly (npx acts weird)
  • 9b87b1a Improve some export/import positions
  • 6b6b80b Fix namespace import pos
  • 95d2c04 Fix import identifier/specifier pos
  • 74a0bd8 Revive some tests in Bun
  • d7b45cf Refactor fixes & consistently use issue.fixes
  • f9cf9dc Apply Next.js page extensions to app directory (#1351)
  • cb1ad7b Release 5.69.0
  • f606570 Lint & format
  • Additional commits viewable in compare view

Updates mocha from 10.4.0 to 10.8.2

Release notes

Sourced from mocha's releases.

v10.8.2

10.8.2 (2024-10-30)

🩹 Fixes

  • support errors with circular dependencies in object values with --parallel (#5212) (ba0fefe)
  • test link in html reporter (#5224) (f054acc)

📚 Documentation

  • indicate 'exports' interface does not work in browsers (#5181) (14e640e)

🧹 Chores

  • fix docs builds by re-adding eleventy and ignoring gitignore again (#5240) (881e3b0)

🤖 Automation

  • deps: bump the github-actions group with 1 update (#5132) (e536ab2)

v10.8.1

10.8.1 (2024-10-29)

🩹 Fixes

v10.8.0

10.8.0 (2024-10-29)

🌟 Features

🩹 Fixes

📚 Documentation

... (truncated)

Changelog

Sourced from mocha's changelog.

10.8.2 (2024-10-30)

🩹 Fixes

  • support errors with circular dependencies in object values with --parallel (#5212) (ba0fefe)
  • test link in html reporter (#5224) (f054acc)

📚 Documentation

  • indicate 'exports' interface does not work in browsers (#5181) (14e640e)

🧹 Chores

  • fix docs builds by re-adding eleventy and ignoring gitignore again (#5240) (881e3b0)

🤖 Automation

  • deps: bump the github-actions group with 1 update (#5132) (e536ab2)

10.8.1 (2024-10-29)

🩹 Fixes

10.8.0 (2024-10-29)

🌟 Features

🩹 Fixes

📚 Documentation

🧹 Chores

  • fix npm scripts on windows (#5219) (1173da0)
  • remove trailing whitespace in SECURITY.md (7563e59)

10.7.3 (2024-08-09)

... (truncated)

Commits
  • 05097db chore(main): release 10.8.2 (#5239)
  • 14e640e docs: indicate 'exports' interface does not work in browsers (#5181)
  • 881e3b0 chore: fix docs builds by re-adding eleventy and ignoring gitignore again (#5...
  • f054acc fix: test link in html reporter (#5224)
  • e536ab2 build(deps): bump the github-actions group with 1 update (#5132)
  • ba0fefe fix: support errors with circular dependencies in object values with --parall...
  • f44f71b chore(main): release 10.8.1 (#5238)
  • f72bc17 fix: handle case of invalid package.json with no explicit config (#5198)
  • 68803b6 fix: use accurate test links in HTML reporter (#5228)
  • d8ca270 fix: Typos on mochajs.org (#5237)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.1.1 and updates ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml), [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) and [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together.


Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `knip` from 5.6.1 to 5.69.1
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Changelog](https://github.com/webpro-nl/knip/blob/main/packages/knip/.release-it.json)
- [Commits](https://github.com/webpro-nl/knip/commits/5.69.1/packages/knip)

Updates `mocha` from 10.4.0 to 10.8.2
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v10.4.0...v10.8.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
- dependency-name: knip
  dependency-version: 5.69.1
  dependency-type: direct:development
- dependency-name: mocha
  dependency-version: 10.8.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant