fix(deps): js-yaml 4.3.0 -> 4.3.2 (CVE-2026-84375 HIGH, DoS i YAML — transitive via des1gn-m0-vågen; trivy-gaten blockerade annars main)
masterplan-lock / check (push) Successful in 7s
CI (SIAX Cloud) / security (push) Successful in 16s
CI (SIAX Cloud) / integration (push) Successful in 25s
Security Scan (SIAX Cloud) / security (push) Successful in 32s
CI (SIAX Cloud) / quality (push) Successful in 37s
Release chain (P007 pattern) / Build, push, SBOM, sign, record evidence (push) Successful in 1m5s
Deploy to Coolify / deploy (push) Successful in 1m12s

This commit is contained in:
2026-09-15 15:24:56 +02:00
parent fb45e369cf
commit 946baef843
+5 -5
View File
@@ -2379,8 +2379,8 @@ packages:
js-tokens@9.0.1:
resolution: {integrity: sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ==}
js-yaml@4.3.0:
resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
js-yaml@4.3.2:
resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==}
hasBin: true
jsesc@3.1.0:
@@ -3373,7 +3373,7 @@ snapshots:
globals: 14.0.0
ignore: 5.3.2
import-fresh: 3.3.1
js-yaml: 4.3.0
js-yaml: 4.3.2
minimatch: 3.1.5
strip-json-comments: 3.1.1
transitivePeerDependencies:
@@ -5203,7 +5203,7 @@ snapshots:
js-tokens@9.0.1: {}
js-yaml@4.3.0:
js-yaml@4.3.2:
dependencies:
argparse: 2.0.1
@@ -5461,7 +5461,7 @@ snapshots:
'@emotion/react': 11.14.0(@types/react@19.2.18)(react@19.2.8)
classnames: 2.5.1
diff: 9.0.0
js-yaml: 4.3.0
js-yaml: 4.3.2
memoize-one: 6.0.0
react: 19.2.8
react-dom: 19.2.8(react@19.2.8)