[PR #828] [MERGED] Bump yaml from 2.2.2 to 2.3.0 #2888

New issue

Closed

opened 2026-03-07 20:11:05 +03:00 by kerem · 0 comments

kerem commented

2026-03-07 20:11:05 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/DavidAnson/markdownlint/pull/828
Author: @dependabot[bot]
Created: 5/24/2023
Status: ✅ Merged
Merged: 5/24/2023
Merged by: @DavidAnson

Base: next ← Head: dependabot/npm_and_yarn/next/yaml-2.3.0

📝 Commits (1)

8a506f7 Bump yaml from 2.2.2 to 2.3.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 package.json (+1 -1)

📄 Description

Bumps yaml from 2.2.2 to 2.3.0.

Release notes

Sourced from yaml's releases.

v2.3.0

This release corresponds with the release of yaml-types v0.2.0, an expanding library of custom tags or types for use with yaml.

This release contains no changes from v2.3.0-5, and the notes below include all changes from the v2.3.0-x prereleases.

Custom Tag Improvements

Add export of createNode() & createPair() to 'yaml/util' (#457)

Add static from() methods to simplify tag development, and otherwise make extending custom collections easier (#467)

TypeScript Improvements

Add a second optional generic type argument Strict to Document instances. (#441)

Add types exports for TypeScript (#463)

Export StringifyContext type from 'yaml/util' (#464)

Other New Features

Add a toJS(doc, options?) method to nodes (#451, #458)

Set explicit tag during createNode() for non-default tags (#464)

Bugfixes

Use correct argument order when stringifying flow collection comments (#443)

Improve first-line folding for block scalars (#422)

v2.3.0-5

Make extending custom collections easier (#467)

Fix corner case failure in error pretty-printer (CVE-2023-2251)

v2.3.0-4

New Features

Set explicit tag during createNode() for non-default tags (#464)

Export StringifyContext type from 'yaml/util' (#464)

v2.3.0-3

Bugfixes

Improve missing-argument error on node .toJS() method (#458)

Add types exports for TypeScript (#463)

Drop incompatible/unnecessary typesVersions from package.json (#463)

v2.3.0-1

New Features

Add a toJS(doc, options?) method to nodes (#451)

Add export of createNode() & createPair() to 'yaml/util' (#457)

Bugfixes

... (truncated)

Commits

431ce22 2.3.0
0d2b3d3 chore: Refresh lockfile
96daea5 2.3.0-5
57f7bf5 docs: Expand visit() documentation
b741332 feat: Make extending custom collections easier (#467)
a67a019 fix: Corner case failure in error pretty-printer
ffdd2fb 2.3.0-4
f169304 feat: Set explicit tag during createNode() for non-default tags (#464)
165a49f feat: Export StringifyContext type from 'yaml/util' (#464)
55e99ab 2.3.0-3
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/DavidAnson/markdownlint/pull/828 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 5/24/2023 **Status:** ✅ Merged **Merged:** 5/24/2023 **Merged by:** [@DavidAnson](https://github.com/DavidAnson) **Base:** `next` ← **Head:** `dependabot/npm_and_yarn/next/yaml-2.3.0` --- ### 📝 Commits (1) - [`8a506f7`](https://github.com/DavidAnson/markdownlint/commit/8a506f7844d08e61895595cc188e65dc5470041d) Bump yaml from 2.2.2 to 2.3.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -1) </details> ### 📄 Description Bumps [yaml](https://github.com/eemeli/yaml) from 2.2.2 to 2.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eemeli/yaml/releases">yaml's releases</a>.</em></p> <blockquote> <h2>v2.3.0</h2> <p>This release corresponds with the release of <a href="https://github.com/eemeli/yaml-types"><code>yaml-types</code></a> v0.2.0, an expanding library of custom tags or types for use with <code>yaml</code>.</p> <p>This release contains no changes from <a href="https://github.com/eemeli/yaml/releases/tag/v2.3.0-5">v2.3.0-5</a>, and the notes below include all changes from the v2.3.0-x prereleases.</p> <h3>Custom Tag Improvements</h3> <ul> <li>Add export of <code>createNode()</code> & <code>createPair()</code> to <code>'yaml/util'</code> (<a href="https://redirect.github.com/eemeli/yaml/issues/457">#457</a>)</li> <li>Add static <code>from()</code> methods to simplify tag development, and otherwise make extending custom collections easier (<a href="https://redirect.github.com/eemeli/yaml/issues/467">#467</a>)</li> </ul> <h3>TypeScript Improvements</h3> <ul> <li>Add a second optional generic type argument <code>Strict</code> to <code>Document</code> instances. (<a href="https://redirect.github.com/eemeli/yaml/issues/441">#441</a>)</li> <li>Add types exports for TypeScript (<a href="https://redirect.github.com/eemeli/yaml/issues/463">#463</a>)</li> <li>Export <code>StringifyContext</code> type from <code>'yaml/util'</code> (<a href="https://redirect.github.com/eemeli/yaml/issues/464">#464</a>)</li> </ul> <h3>Other New Features</h3> <ul> <li>Add a <code>toJS(doc, options?)</code> method to nodes (<a href="https://redirect.github.com/eemeli/yaml/issues/451">#451</a>, <a href="https://redirect.github.com/eemeli/yaml/issues/458">#458</a>)</li> <li>Set explicit tag during <code>createNode()</code> for non-default tags (<a href="https://redirect.github.com/eemeli/yaml/issues/464">#464</a>)</li> </ul> <h3>Bugfixes</h3> <ul> <li>Use correct argument order when stringifying flow collection comments (<a href="https://redirect.github.com/eemeli/yaml/issues/443">#443</a>)</li> <li>Improve first-line folding for block scalars (<a href="https://redirect.github.com/eemeli/yaml/issues/422">#422</a>)</li> </ul> <h2>v2.3.0-5</h2> <ul> <li>Make extending custom collections easier (<a href="https://redirect.github.com/eemeli/yaml/issues/467">#467</a>)</li> <li>Fix corner case failure in error pretty-printer (<a href="https://github.com/advisories/GHSA-f9xv-q969-pqx4">CVE-2023-2251</a>)</li> </ul> <h2>v2.3.0-4</h2> <h3>New Features</h3> <ul> <li>Set explicit tag during <code>createNode()</code> for non-default tags (<a href="https://redirect.github.com/eemeli/yaml/issues/464">#464</a>)</li> <li>Export <code>StringifyContext</code> type from <code>'yaml/util'</code> (<a href="https://redirect.github.com/eemeli/yaml/issues/464">#464</a>)</li> </ul> <h2>v2.3.0-3</h2> <h3>Bugfixes</h3> <ul> <li>Improve missing-argument error on node <code>.toJS()</code> method (<a href="https://redirect.github.com/eemeli/yaml/issues/458">#458</a>)</li> <li>Add types exports for TypeScript (<a href="https://redirect.github.com/eemeli/yaml/issues/463">#463</a>)</li> <li>Drop incompatible/unnecessary <code>typesVersions</code> from package.json (<a href="https://redirect.github.com/eemeli/yaml/issues/463">#463</a>)</li> </ul> <h2>v2.3.0-1</h2> <h3>New Features</h3> <ul> <li>Add a <code>toJS(doc, options?)</code> method to nodes (<a href="https://redirect.github.com/eemeli/yaml/issues/451">#451</a>)</li> <li>Add export of <code>createNode()</code> & <code>createPair()</code> to <code>'yaml/util'</code> (<a href="https://redirect.github.com/eemeli/yaml/issues/457">#457</a>)</li> </ul> <h3>Bugfixes</h3>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eemeli/yaml/commit/431ce2231600485505673b76fc1709fb66213b97"><code>431ce22</code></a> 2.3.0</li> <li><a href="https://github.com/eemeli/yaml/commit/0d2b3d35dd2c906e82f9818aff454bcc51c71a14"><code>0d2b3d3</code></a> chore: Refresh lockfile</li> <li><a href="https://github.com/eemeli/yaml/commit/96daea578b9432a8293c1f1e52f461e1ca90f453"><code>96daea5</code></a> 2.3.0-5</li> <li><a href="https://github.com/eemeli/yaml/commit/57f7bf5664b49b917a331d69a925c667ca998d03"><code>57f7bf5</code></a> docs: Expand visit() documentation</li> <li><a href="https://github.com/eemeli/yaml/commit/b741332a9cbcca1d3547127e6e2d5489a3ce8c5a"><code>b741332</code></a> feat: Make extending custom collections easier (<a href="https://redirect.github.com/eemeli/yaml/issues/467">#467</a>)</li> <li><a href="https://github.com/eemeli/yaml/commit/a67a019afe9c8f785fdfd6255b6b69d97a8bd385"><code>a67a019</code></a> fix: Corner case failure in error pretty-printer</li> <li><a href="https://github.com/eemeli/yaml/commit/ffdd2fbf0df059ea3af5929533d316783f339fa2"><code>ffdd2fb</code></a> 2.3.0-4</li> <li><a href="https://github.com/eemeli/yaml/commit/f16930413af1e922ce5951595c20d67048f01c4c"><code>f169304</code></a> feat: Set explicit tag during createNode() for non-default tags (<a href="https://redirect.github.com/eemeli/yaml/issues/464">#464</a>)</li> <li><a href="https://github.com/eemeli/yaml/commit/165a49fa03ceaebc562e33738ae98919f1d985d5"><code>165a49f</code></a> feat: Export StringifyContext type from 'yaml/util' (<a href="https://redirect.github.com/eemeli/yaml/issues/464">#464</a>)</li> <li><a href="https://github.com/eemeli/yaml/commit/55e99ab0342b754c509ce6988389c681032f74f5"><code>55e99ab</code></a> 2.3.0-3</li> <li>Additional commits viewable in <a href="https://github.com/eemeli/yaml/compare/v2.2.2...v2.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=yaml&package-manager=npm_and_yarn&previous-version=2.2.2&new-version=2.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>