Skip to content

Chore: JS-yaml vulnerability #182

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
SbsCruz wants to merge 2 commits into
base: main
Choose a base branch
from
+46 −37
Open

Chore: JS-yaml vulnerability #182

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
12866b4
chore: upgrade eslint and @eslint/js to v9.39.5
SbsCruz Sep 29, 2026
26a0283
chore: dedupe js-yaml to v4.3.2
SbsCruz Sep 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@
"test": "turbo run test"
},
"devDependencies": {
"@eslint/js": "^9.39.1",
"@eslint/js": "^9.39.5",
"@react-native-community/cli": "20.1.0",
"@react-native-community/cli-platform-android": "20.1.0",
"@react-native-community/cli-platform-ios": "20.1.0",
Expand All @@ -38,7 +38,7 @@
"@react-native/new-app-screen": "0.84.0",
"@react-native/typescript-config": "0.84.0",
"@stylistic/eslint-plugin": "^5.6.1",
"eslint": "^9.39.1",
"eslint": "^9.39.5",
"eslint-import-resolver-typescript": "^4.4.4",
"eslint-plugin-import": "^2.32.0",
"eslint-plugin-jsdoc": "^61.2.1",
Expand Down
79 changes: 44 additions & 35 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1385,14 +1385,14 @@ __metadata:
languageName: node
linkType: hard

"@eslint/config-array@npm:^0.21.1":
version: 0.21.1
resolution: "@eslint/config-array@npm:0.21.1"
"@eslint/config-array@npm:^0.21.2":
version: 0.21.2
resolution: "@eslint/config-array@npm:0.21.2"
dependencies:
"@eslint/object-schema": "npm:^2.1.7"
debug: "npm:^4.3.1"
minimatch: "npm:^3.1.2"
checksum: 10/6eaa0435972f735ce52d581f355a0b616e50a9b8a73304a7015398096e252798b9b3b968a67b524eefb0fdeacc57c4d960f0ec6432abe1c1e24be815b88c5d18
minimatch: "npm:^3.1.5"
checksum: 10/148477ba995cf57fc725601916d5a7914aa249112d8bec2c3ac9122e2b2f540e6ef013ff4f6785346a4b565f09b20db127fa6f7322f5ffbdb3f1f8d2078a531c
languageName: node
linkType: hard

Expand All @@ -1414,27 +1414,27 @@ __metadata:
languageName: node
linkType: hard

"@eslint/eslintrc@npm:^3.3.1":
version: 3.3.1
resolution: "@eslint/eslintrc@npm:3.3.1"
"@eslint/eslintrc@npm:^3.3.6":
version: 3.3.7
resolution: "@eslint/eslintrc@npm:3.3.7"
dependencies:
ajv: "npm:^6.12.4"
ajv: "npm:^6.14.0"
debug: "npm:^4.3.2"
espree: "npm:^10.0.1"
globals: "npm:^14.0.0"
ignore: "npm:^5.2.0"
import-fresh: "npm:^3.2.1"
js-yaml: "npm:^4.1.0"
minimatch: "npm:^3.1.2"
js-yaml: "npm:^4.3.2"
minimatch: "npm:^3.1.5"
strip-json-comments: "npm:^3.1.1"
checksum: 10/cc240addbab3c5fceaa65b2c8d5d4fd77ddbbf472c2f74f0270b9d33263dc9116840b6099c46b64c9680301146250439b044ed79278a1bcc557da412a4e3c1bb
checksum: 10/8d778a0f3d1dd3cde8333a5943086bc3497d1adfe804600827dfd76369b83543a9b8884850556be2dd2e5f11838a8c83a32beda43a79aa42f149c75a39de1dbe
languageName: node
linkType: hard

"@eslint/js@npm:9.39.1, @eslint/js@npm:^9.39.1":
version: 9.39.1
resolution: "@eslint/js@npm:9.39.1"
checksum: 10/b10b9b953212c0f3ffca475159bbe519e9e98847200c7432d1637d444fddcd7b712d2b7710a7dc20510f9cfbe8db330039b2aad09cb55d9545b116d940dbeed2
"@eslint/js@npm:9.39.5, @eslint/js@npm:^9.39.5":
version: 9.39.5
resolution: "@eslint/js@npm:9.39.5"
checksum: 10/042d522f28da10ab205f368a94b620334418eb13a5226e50f7edd03dbe26809eb477d0b7a4dc3968b43a98f6ce594f6c03731214c3e0386fd5bcb74fdb9df64c
languageName: node
linkType: hard

Expand Down Expand Up @@ -4229,15 +4229,15 @@ __metadata:
languageName: node
linkType: hard

"ajv@npm:^6.12.4":
version: 6.12.6
resolution: "ajv@npm:6.12.6"
"ajv@npm:^6.14.0":
version: 6.15.0
resolution: "ajv@npm:6.15.0"
dependencies:
fast-deep-equal: "npm:^3.1.1"
fast-json-stable-stringify: "npm:^2.0.0"
json-schema-traverse: "npm:^0.4.1"
uri-js: "npm:^4.2.2"
checksum: 10/48d6ad21138d12eb4d16d878d630079a2bda25a04e745c07846a4ad768319533031e28872a9b3c5790fa1ec41aabdf2abed30a56e5a03ebc2cf92184b8ee306c
checksum: 10/0916dda09c152fb5857bc1cc7ce61718e9cec5b7faeff44a74f5e324eed8a556e1a84856724ea322a067b436ecad9f74ac8295fd395449788cca52f0c25bd5fb
languageName: node
linkType: hard

Expand Down Expand Up @@ -4591,7 +4591,7 @@ __metadata:
version: 0.0.0-use.local
resolution: "assertive-ts@workspace:."
dependencies:
"@eslint/js": "npm:^9.39.1"
"@eslint/js": "npm:^9.39.5"
"@react-native-community/cli": "npm:20.1.0"
"@react-native-community/cli-platform-android": "npm:20.1.0"
"@react-native-community/cli-platform-ios": "npm:20.1.0"
Expand All @@ -4601,7 +4601,7 @@ __metadata:
"@react-native/new-app-screen": "npm:0.84.0"
"@react-native/typescript-config": "npm:0.84.0"
"@stylistic/eslint-plugin": "npm:^5.6.1"
eslint: "npm:^9.39.1"
eslint: "npm:^9.39.5"
eslint-import-resolver-typescript: "npm:^4.4.4"
eslint-plugin-import: "npm:^2.32.0"
eslint-plugin-jsdoc: "npm:^61.2.1"
Expand Down Expand Up @@ -7128,23 +7128,23 @@ __metadata:
languageName: node
linkType: hard

"eslint@npm:^9.39.1":
version: 9.39.1
resolution: "eslint@npm:9.39.1"
"eslint@npm:^9.39.5":
version: 9.39.5
resolution: "eslint@npm:9.39.5"
dependencies:
"@eslint-community/eslint-utils": "npm:^4.8.0"
"@eslint-community/regexpp": "npm:^4.12.1"
"@eslint/config-array": "npm:^0.21.1"
"@eslint/config-array": "npm:^0.21.2"
"@eslint/config-helpers": "npm:^0.4.2"
"@eslint/core": "npm:^0.17.0"
"@eslint/eslintrc": "npm:^3.3.1"
"@eslint/js": "npm:9.39.1"
"@eslint/eslintrc": "npm:^3.3.6"
"@eslint/js": "npm:9.39.5"
"@eslint/plugin-kit": "npm:^0.4.1"
"@humanfs/node": "npm:^0.16.6"
"@humanwhocodes/module-importer": "npm:^1.0.1"
"@humanwhocodes/retry": "npm:^0.4.2"
"@types/estree": "npm:^1.0.6"
ajv: "npm:^6.12.4"
ajv: "npm:^6.14.0"
chalk: "npm:^4.0.0"
cross-spawn: "npm:^7.0.6"
debug: "npm:^4.3.2"
Expand All @@ -7163,7 +7163,7 @@ __metadata:
is-glob: "npm:^4.0.0"
json-stable-stringify-without-jsonify: "npm:^1.0.1"
lodash.merge: "npm:^4.6.2"
minimatch: "npm:^3.1.2"
minimatch: "npm:^3.1.5"
natural-compare: "npm:^1.4.0"
optionator: "npm:^0.9.3"
peerDependencies:
Expand All @@ -7173,7 +7173,7 @@ __metadata:
optional: true
bin:
eslint: bin/eslint.js
checksum: 10/c85fefe4a81a1a476e62087366907af830b62a6565ac153f6d50a100a42a946aeb049c3af8f06c0e091105ba0fe97ac109f379f32755a67f66ecb7d4d1e4dca3
checksum: 10/081b27602a923276e4d591a0ef7972ff6f12cd189a93a0dadd5b8eb0338f2984882dc92d545cdf3527cb9c78230183394d411cf68098ee9dbbcb80d4f9fe115c
languageName: node
linkType: hard

Expand Down Expand Up @@ -9905,14 +9905,14 @@ __metadata:
languageName: node
linkType: hard

"js-yaml@npm:^4.1.0":
version: 4.1.0
resolution: "js-yaml@npm:4.1.0"
"js-yaml@npm:^4.1.0, js-yaml@npm:^4.3.2":
version: 4.3.2
resolution: "js-yaml@npm:4.3.2"
dependencies:
argparse: "npm:^2.0.1"
bin:
js-yaml: bin/js-yaml.js
checksum: 10/c138a34a3fd0d08ebaf71273ad4465569a483b8a639e0b118ff65698d257c2791d3199e3f303631f2cb98213fa7b5f5d6a4621fd0fff819421b990d30d967140
checksum: 10/05c44b9c73e4901d92703b155e76518df64bf01ac62e4c036b47de4b391e19b72e32656e8954d51b436307f08cc9d0c0d4ec617d061cf2f65fffee9f3114bee7
languageName: node
linkType: hard

Expand Down Expand Up @@ -11163,6 +11163,15 @@ __metadata:
languageName: node
linkType: hard

"minimatch@npm:^3.1.5":
version: 3.1.5
resolution: "minimatch@npm:3.1.5"
dependencies:
brace-expansion: "npm:^1.1.7"
checksum: 10/b11a7ee5773cd34c1a0c8436cdbe910901018fb4b6cb47aa508a18d567f6efd2148507959e35fba798389b161b8604a2d704ccef751ea36bd4582f9852b7d63f
languageName: node
linkType: hard

"minimatch@npm:^8.0.2":
version: 8.0.7
resolution: "minimatch@npm:8.0.7"
Expand Down
Loading