Skip to content

📦 Bump js-yaml from 3.14.2 to 3.15.0 in /tools/hermes-parser/js#344

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tools/hermes-parser/js/js-yaml-3.15.0
Open

📦 Bump js-yaml from 3.14.2 to 3.15.0 in /tools/hermes-parser/js#344
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tools/hermes-parser/js/js-yaml-3.15.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown

Bumps js-yaml from 3.14.2 to 3.15.0.

Changelog

Sourced from js-yaml's changelog.

4.3.0, 3.15.0 - 2026-06-27

Security

  • Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.
  • Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

  • maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

  • Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

  • Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

  • [breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

  • Added named exports for schemas, tags, parser events and AST utilities.
  • Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.
  • Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.
  • Added dump() transform option for changing the generated AST before rendering.
  • Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.
  • Added formal data layers (events and AST) for modular data pipelines.
    • Added low-level parser (to events), presenter and visitor APIs.
  • Added the YAML Test Suite to the test set.

Changed

  • See the migration guide for upgrade notes.
  • Rewritten in TypeScript and reorganized the public API around flat named exports.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.
###### Microsoft Reviewers: [Open in CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com//pull/344)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.2 to 3.15.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.2...3.15.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026
@dependabot dependabot Bot requested a review from a team as a code owner July 9, 2026 00:50
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown

Benchmark Results

Total benchmarks: 204

Inputs: baseline/baseline.json, bench_result.json

v8 (6176ms, 6173ms) -0.1%
v8 hermes (CI) hermes (CI)
v8-crypto 622.6ms 596ms
v8-deltablue 739.4ms 720.4ms
v8-raytrace 127.8ms 124ms
v8-regexp 593ms 631ms
v8-richards 937ms 875.2ms
v8-splay 225.2ms 230.8ms
v8-crypto (static) 452ms 436ms
v8-deltablue (static) 661.6ms 648.6ms
v8-raytrace (static) 91.8ms 95.2ms
v8-regexp (static) 749.2ms 827.4ms
v8-richards (static) 781.4ms 786.8ms
v8-splay (static) 195ms 201.2ms
test-suites (317886ms, 313799ms) -1.3%
test-suites hermes (CI) hermes (CI)
box2d 2949.8ms 2567.6ms
earley-boyer 2564.8ms 2571ms
navier-stokes 5743.8ms 4473.4ms
pdfjs 1038.2ms 942.8ms
gbemu 2296ms 2188.6ms
code-load 4472.8ms 4547ms
typescript 3381.8ms 3265.6ms
simpleSum 8855.4ms 5701.6ms
propAccess 2691.2ms 2237.6ms
allocObj 252ms 197ms
allocObjLit 6371.8ms 6207.4ms
allocNewObj 20053ms 20212.8ms
allocArray 249ms 197.6ms
allocNewArray 34956.8ms 36257.6ms
arrayRead 115.6ms 113.4ms
arrayReadByIndex 550ms 702.4ms
largeArrayRead 827.2ms 722ms
arrayWrite 261.8ms 287.2ms
largeArrayWrite 2218ms 2096.6ms
interp-dispatch 2880ms 2042.4ms
wb-perf 8327ms 11551.2ms
arrayReverse 40.6ms 38.2ms
arrayMap 1472.6ms 1497.8ms
arrayIndexOf 143.2ms 138.6ms
arrayLastIndexOf 148.6ms 146.2ms
arrayEvery 2308.8ms 2283.2ms
arraySome 2174.4ms 2277.2ms
arrayFill 2401.2ms 2457.2ms
arrayFilter 1866.4ms 1972ms
arrayFind 3207ms 3380.6ms
arrayFindIndex 3322ms 3388.8ms
arrayPop 1031.4ms 1040.6ms
arrayReduce 1994.2ms 2116.4ms
arrayReduceRight 2075.8ms 2115ms
arrayShift 2065.8ms 2076.2ms
arrayUnshift 2109.4ms 2128.4ms
arrayIncludes 1216.6ms 1180.2ms
arrayFrom 1102.8ms 1453.2ms
arrayCopyWithin 1487ms 1508.6ms
stringFromCharCode 92.6ms 89.6ms
arraySlice 786.2ms 779ms
arraySplice 26.8ms 26.6ms
arrayOf 1048.8ms 1039.6ms
stringCharAt 1346.6ms 1280ms
stringMatch 3192.4ms 2845.2ms
stringSearch 3508.2ms 2846.2ms
stringStartsWith 701ms 595.4ms
stringEndsWith 650.4ms 537.8ms
stringIncludes 1520.6ms 1692.6ms
stringIndexOf 1555.6ms 1946.6ms
stringLastIndexOf 1821.4ms 1936ms
stringSplit 822ms 796.2ms
stringSlice 490ms 486.8ms
stringPadStart 2910.8ms 2902.4ms
stringPadEnd 2910ms 2902.4ms
regExpMatch 1506.2ms 1520ms
regExpSearch 1227ms 1218.8ms
regExpToString 1204ms 1063.4ms
stringReplace 1394.8ms 1538ms
regExpReplace 3309.2ms 878.4ms
regExpFlags 956.8ms 947.2ms
regExpSplit 1307.8ms 1243.2ms
numberArrayReadWrite 2477.8ms 2368.2ms
protoCache 3594.6ms 2343.8ms
box2d (static) 1792.6ms 1790.2ms
earley-boyer (static) 1875.6ms 1889.8ms
navier-stokes (static) 3410.2ms 3445.6ms
pdfjs (static) 812.8ms 800.8ms
gbemu (static) 1797ms 1730.6ms
code-load (static) 4199.2ms 4166.6ms
typescript (static) 2685.6ms 2602.8ms
simpleSum (static) 936.2ms 937.4ms
propAccess (static) 2298ms 2304.6ms
allocObj (static) 0.2ms 0.6ms
allocObjLit (static) 4154.4ms 4155.4ms
allocNewObj (static) 15749.2ms 15812.8ms
allocArray (static) 0.6ms 0.4ms
allocNewArray (static) 28494.2ms 28488ms
arrayRead (static) 74.2ms 70.4ms
arrayReadByIndex (static) 453.2ms 447ms
largeArrayRead (static) 552.2ms 554ms
arrayWrite (static) 178.4ms 179.2ms
largeArrayWrite (static) 1568.6ms 1620.6ms
interp-dispatch (static) 1918.8ms 1910.4ms
wb-perf (static) 8991.2ms 9712.2ms
arrayReverse (static) 37ms 40ms
arrayMap (static) 1064.8ms 1028.2ms
arrayIndexOf (static) 128.2ms 130.6ms
arrayLastIndexOf (static) 138.8ms 141.4ms
arrayEvery (static) 1397.6ms 1404.8ms
arraySome (static) 1406.6ms 1407.4ms
arrayFill (static) 1969.2ms 1972ms
arrayFilter (static) 1061ms 1053.6ms
arrayFind (static) 2242.2ms 2266.6ms
arrayFindIndex (static) 2235.8ms 2276ms
arrayPop (static) 878ms 889.4ms
arrayReduce (static) 1311.8ms 1313.2ms
arrayReduceRight (static) 1322.6ms 1307.8ms
arrayShift (static) 1512ms 1504.8ms
arrayUnshift (static) 1568.2ms 1574.2ms
arrayIncludes (static) 963.4ms 933.8ms
arrayFrom (static) 1030.6ms 1003.6ms
arrayCopyWithin (static) 1109.6ms 1118.2ms
stringFromCharCode (static) 77ms 79.8ms
arraySlice (static) 571.6ms 570ms
arraySplice (static) 26ms 26.6ms
arrayOf (static) 868.8ms 858.6ms
stringCharAt (static) 1100.6ms 1114.4ms
stringMatch (static) 2227.6ms 2283.4ms
stringSearch (static) 2219.2ms 2285.8ms
stringStartsWith (static) 494.2ms 492.8ms
stringEndsWith (static) 457.8ms 459ms
stringIncludes (static) 1437.4ms 1921.2ms
stringIndexOf (static) 1440.8ms 1915.8ms
stringLastIndexOf (static) 1956.6ms 1905ms
stringSplit (static) 651.2ms 715.2ms
stringSlice (static) 445.6ms 421.2ms
stringPadStart (static) 2294.4ms 2405.8ms
stringPadEnd (static) 2499.2ms 2411.4ms
regExpMatch (static) 1483.2ms 1581.4ms
regExpSearch (static) 1296.2ms 1213.6ms
regExpToString (static) 1326.6ms 1044.6ms
stringReplace (static) 1455.6ms 1518.6ms
regExpReplace (static) 851.8ms 844.8ms
regExpFlags (static) 870.6ms 808.6ms
regExpSplit (static) 1200ms 1123.2ms
numberArrayReadWrite (static) 2132.8ms 2093.6ms
protoCache (static) 3595.8ms 3615.2ms
micros (60876ms, 60190ms) -1.1%
micros hermes (CI) hermes (CI)
getNodeById.js 5273ms 4771.6ms
setInsert.js 2864.8ms 2630.4ms
stringify-number.js 1823.4ms 1779.8ms
typed-array-sort.js 22381ms 22493.6ms
getNodeById.js (static) 3941ms 3929.6ms
setInsert.js (static) 2517.6ms 2330.2ms
stringify-number.js (static) 1663.6ms 1545ms
typed-array-sort.js (static) 20411.4ms 20710ms
jit-benches (8563ms, 7362ms) -14.0%
jit-benches hermes (CI) hermes (CI)
idisp.js 2810.2ms 3013.2ms
idispn.js 3395.8ms 2049.6ms
idisp.js (static) 1906ms 1911.8ms
idispn.js (static) 450.8ms 387.4ms
many-subclasses (73437ms, 75679ms) +3.1%
many-subclasses hermes (CI) hermes (CI)
many.js 19104.8ms 18326.2ms
many-sh-1.js 7322.8ms 8071.2ms
many-sh-2.js 7329ms 8109ms
many-sh-3.js 7083.6ms 7970.6ms
many-sh-4.js 7235ms 7967ms
many.js (static) 15996ms 15826.8ms
many-sh-1.js (static) 2285.2ms 2255.2ms
many-sh-2.js (static) 2387ms 2465.8ms
many-sh-3.js (static) 2347.2ms 2340.6ms
many-sh-4.js (static) 2346ms 2347ms
map-objects (3627ms, 3580ms) -1.3%
map-objects hermes (CI) hermes (CI)
map-objects-untyped.js 1023.6ms 995.2ms
map-objects-typed.js 957.6ms 937.4ms
map-objects-untyped.js (static) 917.2ms 917.4ms
map-objects-typed.js (static) 728.8ms 730.2ms
map-strings (4335ms, 4276ms) -1.4%
map-strings hermes (CI) hermes (CI)
map-strings-untyped.js 1196.8ms 1155.6ms
map-strings-typed.js 1139.2ms 1089ms
map-strings-untyped.js (static) 1092.2ms 1124.4ms
map-strings-typed.js (static) 906.8ms 907ms
nbody (3448ms, 2923ms) -15.2%
nbody hermes (CI) hermes (CI)
original/nbody.js 839.6ms 632.8ms
fully-typed/nbody.js 710ms 533.8ms
fully-typed/nbody.ts 865.2ms 728.6ms
original/nbody.js (static) 449.2ms 446.4ms
fully-typed/nbody.js (static) 135ms 131ms
fully-typed/nbody.ts (static) 449.2ms 450ms
string-switch (6503ms, 6030ms) -7.3%
string-switch (string-switch/plain) hermes (CI) hermes (CI)
bench.js 1316ms 1276ms
bench.js (static) 5187ms 4754ms
raytracer (5608ms, 5434ms) -3.1%
raytracer (raytracer/original) hermes (CI) hermes (CI)
bench-raytracer.js 1550.4ms 1448.6ms
raytracer.ts 1667.6ms 1535.8ms
bench-raytracer.js (static) 1198.4ms 1213.6ms
raytracer.ts (static) 1191.8ms 1235.8ms
MiniReact (30332ms, 29111ms) -4.0%
MiniReact hermes (CI) hermes (CI)
no-objects/out/simple-stripped.js 2239.2ms 2117.4ms
no-objects/out/simple-lowered.js 2270.8ms 2171ms
no-objects/out/music-stripped.js 42.6ms 41.8ms
no-objects/out/music-lowered.js 47.2ms 46.2ms
no-deps/stripped/MiniReact.js 5004ms 4617ms
no-deps/MiniReact.js 5256.2ms 4555.6ms
no-objects/out/simple.js 2260.4ms 2177.4ms
no-objects/out/music.js 45.6ms 44.6ms
no-objects/out/simple-stripped.js (static) 1725.2ms 1721.6ms
no-objects/out/simple-lowered.js (static) 1725.4ms 1738.2ms
no-objects/out/music-stripped.js (static) 18.8ms 18.8ms
no-objects/out/music-lowered.js (static) 19.4ms 18.6ms
no-deps/stripped/MiniReact.js (static) 4024.8ms 4096.4ms
no-deps/MiniReact.js (static) 3938.2ms 4015ms
no-objects/out/simple.js (static) 1695.2ms 1712.6ms
no-objects/out/music.js (static) 19ms 18.8ms
widgets (12934ms, 12525ms) -3.2%
widgets hermes (CI) hermes (CI)
simple-classes/widgets.js 1758.2ms 1607.2ms
original/es5/widgets.js 2798.8ms 2703.8ms
single-file/es5/widgets.js 2775.2ms 2689.6ms
simple-classes/widgets.js (static) 1012ms 1011.4ms
original/es5/widgets.js (static) 2283.2ms 2250.4ms
single-file/es5/widgets.js (static) 2306.2ms 2262.6ms

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants