Packages

js-yaml

5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed

Upgrading js-yaml from 1.0.1 to 3.15.0

60 releases in betweennotes for 11

Other targets from 1.0.1Newest 1.x1.0.3Latest5.5.0
3.0.0, 2.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
?
changes to make
5
advisories fixed
2+
new
11+
fixes

Counted from 11 of 60 release notes. Advisories are counted from the advisory database, in full.

Security

2 advisories still affect 3.15.0

Upgrading to 3.15.2 clears them.

Fixes 5 advisories affecting 1.0.1

  • Close security issue in !!js/function constructor. Big thanks to @nealpoole for security audit.

    2.0.5

Release by release

  1. 3.0.0 – 3.15.048 releases, no release note

  2. 2.1.3

    15 Oct 20131 fix
    • fixed

      Fix wrong loading of empty block scalars.

  3. 2.1.2

    6 Oct 20131 fix
    • fixed

      Fix unwanted line breaks in folded scalars.

  4. 2.1.1

    1 Oct 20132 fixes
    • fixed

      Dumper now respects deprecated booleans syntax from YAML 1.0/1.1

    • fixed

      Fixed reader bug in JSON-like sequences/mappings.

  5. 2.1.0

    5 Jun 20132 new · 1 fix
    • new

      Add standard YAML schemas: Failsafe (FAILSAFE_SCHEMA), JSON (JSON_SCHEMA) and Core (CORE_SCHEMA).

    • new

      Add skipInvalid dumper option.

    • fixed

      Bug fix: export NIL constant from the public interface.

  6. 2.0.4 – 2.0.52 releases, nothing new or fixed in the notes

  7. 2.0.3

    26 Feb 20131 fix
    • fixed

      Fixed dumping of empty arrays ans objects. ( and {} instead of null)

  8. 2.0.2

    15 Feb 20131 fix
    • fixed

      Fixed input validation: tabs are printable characters.

3 other lines we could not sort, mostly version bumps

  • Rename DEFAULT_SCHEMA to DEFAULT_FULL_SCHEMA and SAFE_SCHEMA to DEFAULT_SAFE_SCHEMA.

    2.1.0

  • Use safeLoad for require extension.

    2.1.0

  • Updated .npmignore to reduce package size

    2.0.4