Packages

js-yaml

5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed

Upgrading js-yaml from 0.3.4 to 3.15.0

65 releases in betweennotes for 9

Other targets from 0.3.4Newest 0.x0.3.7Latest5.5.0
3.0.0, 2.0.0, 1.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
?
changes to make
5
advisories fixed
2+
new
8+
fixes

Counted from 9 of 65 release notes. Advisories are counted from the advisory database, in full.

Security

2 advisories still affect 3.15.0

Upgrading to 3.15.2 clears them.

Fixes 5 advisories affecting 0.3.4

  • Close security issue in !!js/function constructor. Big thanks to @nealpoole for security audit.

    2.0.5

Release by release

  1. 3.0.0 – 3.15.048 releases, no release note

  2. 2.1.3

    15 Oct 20131 fix
    • fixed

      Fix wrong loading of empty block scalars.

  3. 2.1.2

    6 Oct 20131 fix
    • fixed

      Fix unwanted line breaks in folded scalars.

  4. 2.1.1

    1 Oct 20132 fixes
    • fixed

      Dumper now respects deprecated booleans syntax from YAML 1.0/1.1

    • fixed

      Fixed reader bug in JSON-like sequences/mappings.

  5. 2.1.0

    5 Jun 20132 new · 1 fix
    • new

      Add standard YAML schemas: Failsafe (FAILSAFE_SCHEMA), JSON (JSON_SCHEMA) and Core (CORE_SCHEMA).

    • new

      Add skipInvalid dumper option.

    • fixed

      Bug fix: export NIL constant from the public interface.

  6. 2.0.4 – 2.0.52 releases, nothing new or fixed in the notes

  7. 2.0.3

    26 Feb 20131 fix
    • fixed

      Fixed dumping of empty arrays ans objects. ( and {} instead of null)

  8. 2.0.2

    15 Feb 20131 fix
    • fixed

      Fixed input validation: tabs are printable characters.

3 other lines we could not sort, mostly version bumps

  • Rename DEFAULT_SCHEMA to DEFAULT_FULL_SCHEMA and SAFE_SCHEMA to DEFAULT_SAFE_SCHEMA.

    2.1.0

  • Use safeLoad for require extension.

    2.1.0

  • Updated .npmignore to reduce package size

    2.0.4