Skip to content

chore(deps): bump js-yaml from 4.3.0 to 5.2.1 in /workspaces/topology - #9716

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/workspaces/topology/js-yaml-4.2.0
Closed

chore(deps): bump js-yaml from 4.3.0 to 5.2.1 in /workspaces/topology#9716
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/workspaces/topology/js-yaml-4.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 4.3.0 to 5.2.1.

Changelog

Sourced from js-yaml's changelog.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).
Commits
  • ac16b42 5.2.1 released
  • 4a864e5 Deps bump
  • 39f3211 !!omap: add Map support and remove quadratic complexity
  • ff17f1e Changelog update
  • 8ed15f1 deps bump
  • 1a562dc Fix changelog link
  • c28ed5e 5.2.0 released
  • 125cd5a Add maxAliases option
  • 3105455 Replace maxMergeSeqLengthoption with maxTotalMergeKeys (more robust)
  • 39d00d6 numbers: Drop boxed numbers support, simplify .identify() checks, clarify rou...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 29, 2026
Copilot AI review requested due to automatic review settings June 29, 2026 15:38
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 29, 2026
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Jun 29, 2026
Copilot AI reviewed Jun 29, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

@dependabot
dependabot Bot requested a review from 04kash June 29, 2026 15:38
@backstage-goalie

backstage-goalie Bot commented Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Changed Packages

Package Name Package Path Changeset Bump Current Version
@backstage-community/plugin-topology workspaces/topology/plugins/topology patch v2.15.0

@backstage-service
backstage-service force-pushed the dependabot/npm_and_yarn/workspaces/topology/js-yaml-4.2.0 branch from 3f14bff to 1308094 Compare June 29, 2026 15:39
@christoph-jerolimov

christoph-jerolimov commented Jul 21, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

1 similar comment
@christoph-jerolimov

christoph-jerolimov commented Jul 21, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot dependabot Bot changed the title chore(deps): bump js-yaml from 4.1.1 to 4.2.0 in /workspaces/topology chore(deps): bump js-yaml from 4.3.0 to 5.2.1 in /workspaces/topology Jul 21, 2026
Copilot AI review requested due to automatic review settings July 21, 2026 17:30
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/workspaces/topology/js-yaml-4.2.0 branch from 1308094 to acd0019 Compare July 21, 2026 17:30
Copilot AI reviewed Jul 21, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.

@dependabot Github changeset workflow
chore(deps): bump js-yaml from 4.3.0 to 5.2.1 in /workspaces/topology
3a15bc9 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.0 to 5.2.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...5.2.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings July 21, 2026 17:46
@backstage-service
backstage-service force-pushed the dependabot/npm_and_yarn/workspaces/topology/js-yaml-4.2.0 branch from acd0019 to 3a15bc9 Compare July 21, 2026 17:46
Copilot AI reviewed Jul 21, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

Comment thread workspaces/topology/plugins/topology/package.json
"classnames": "2.x",
"git-url-parse": "^13.1.0",
"js-yaml": "^4.1.0",
"js-yaml": "^5.2.1",
@christoph-jerolimov

christoph-jerolimov commented Jul 21, 2026

Copy link
Copy Markdown
Member

copilot:

js-yaml@5 removes the ESM default export by design and migrates to flat named exports. The codebase currently uses a default import (import jsYaml from 'js-yaml') and calls jsYaml.dump(...), which will break at runtime/compile time once this dependency is bumped to v5.

We should be aligned for now with the version that is used in Backstage (^4.2.0 in 1.53.0)

https://github.com/backstage/backstage/blob/v1.53.0/package.json#L164

@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@christoph-jerolimov
christoph-jerolimov deleted the dependabot/npm_and_yarn/workspaces/topology/js-yaml-4.2.0 branch July 21, 2026 19:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Lite
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@christoph-jerolimov christoph-jerolimov Awaiting requested review from christoph-jerolimov christoph-jerolimov is a code owner
@ciiay ciiay Awaiting requested review from ciiay ciiay is a code owner
@debsmita1 debsmita1 Awaiting requested review from debsmita1 debsmita1 is a code owner
@divyanshiGupta divyanshiGupta Awaiting requested review from divyanshiGupta divyanshiGupta is a code owner
@its-mitesh-kumar its-mitesh-kumar Awaiting requested review from its-mitesh-kumar its-mitesh-kumar is a code owner
@logonoff logonoff Awaiting requested review from logonoff logonoff is a code owner
@lokanandaprabhu lokanandaprabhu Awaiting requested review from lokanandaprabhu lokanandaprabhu is a code owner
@rohitkrai03 rohitkrai03 Awaiting requested review from rohitkrai03 rohitkrai03 is a code owner
@jrichter1 jrichter1 Awaiting requested review from jrichter1 jrichter1 is a code owner
@HusneShabbir HusneShabbir Awaiting requested review from HusneShabbir HusneShabbir is a code owner
@karthikjeeyar karthikjeeyar Awaiting requested review from karthikjeeyar karthikjeeyar is a code owner
@04kash 04kash Awaiting requested review from 04kash 04kash is a code owner automatically assigned from backstage/community-plugins-maintainers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code workspace/topology

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@christoph-jerolimov @backstage-service