Packages

js-yaml

5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed

Upgrading js-yaml from 5.4.0 to 5.5.0

4 releases in betweenevery note read

Other targets from 5.4.0Clears its advisory5.4.1
0
changes to make
1
advisory fixed
0
new
4
fixes

Security

Fixes 1 advisory affecting 5.4.0

  • Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

    5.4.1

Release by release

  1. 5.5.0

    15 Oct 20262 fixes
    • fixed

      Correct percent-encoding of shorthand and verbatim tags.

    • fixed

      Reject ,, ], and } at the start of block plain scalars, #801.

  2. 5.4.3

    5 Oct 20261 fix
    • fixed

      Fixed loading a whitespace-only block scalar followed by a less indented line, #802.

  3. 5.4.2

    13 Sep 20261 fix
    • fixed

      forceQuotes no longer quotes non-string scalars, #798.

  4. 5.4.1nothing new or fixed in the note

3 other lines we could not sort, mostly version bumps

  • Updated argparse to v3.

    5.5.0

  • Updated development dependencies.

    5.5.0

  • Hard-limit merge sequence size to 100.

    5.4.1