Skip to content

馃摝 Bump js-yaml from 3.14.2 to 3.15.0 in /tools/hermes-parser/js - #344

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tools/hermes-parser/js/js-yaml-3.15.0
Closed

馃摝 Bump js-yaml from 3.14.2 to 3.15.0 in /tools/hermes-parser/js#344
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tools/hermes-parser/js/js-yaml-3.15.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown

Bumps js-yaml from 3.14.2 to 3.15.0.

Changelog

Sourced from js-yaml's changelog.

4.3.0, 3.15.0 - 2026-06-27

Security

  • Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.
  • Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

  • maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

  • Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

  • Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

  • [breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

  • Added named exports for schemas, tags, parser events and AST utilities.
  • Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.
  • Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.
  • Added dump() transform option for changing the generated AST before rendering.
  • Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.
  • Added formal data layers (events and AST) for modular data pipelines.
    • Added low-level parser (to events), presenter and visitor APIs.
  • Added the YAML Test Suite to the test set.

Changed

  • See the migration guide for upgrade notes.
  • Rewritten in TypeScript and reorganized the public API around flat named exports.

... (truncated)

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 9, 2026 00:50
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown

Benchmark Results

Total benchmarks: 204

Inputs: baseline/baseline.json, bench_result.json

v8 (6176ms, 6243ms) +1.1%
v8 hermes (CI) hermes (CI)
v8-crypto 622.6ms 612.6ms
v8-deltablue 739.4ms 776.8ms
v8-raytrace 127.8ms 120.4ms
v8-regexp 593ms 616.6ms
v8-richards 937ms 929.2ms
v8-splay 225.2ms 232ms
v8-crypto (static) 452ms 442.8ms
v8-deltablue (static) 661.6ms 679.6ms
v8-raytrace (static) 91.8ms 94.6ms
v8-regexp (static) 749.2ms 764.6ms
v8-richards (static) 781.4ms 761.6ms
v8-splay (static) 195ms 211.8ms
test-suites (317886ms, 327135ms) +2.9%
test-suites hermes (CI) hermes (CI)
box2d 2949.8ms 2481.4ms
earley-boyer 2564.8ms 2694.8ms
navier-stokes 5743.8ms 4679.4ms
pdfjs 1038.2ms 1033.4ms
gbemu 2296ms 2426.4ms
code-load 4472.8ms 4660.2ms
typescript 3381.8ms 3021ms
simpleSum 8855.4ms 6435.4ms
propAccess 2691.2ms 2193.2ms
allocObj 252ms 226ms
allocObjLit 6371.8ms 6305.8ms
allocNewObj 20053ms 20429.8ms
allocArray 249ms 222.8ms
allocNewArray 34956.8ms 36351ms
arrayRead 115.6ms 96.6ms
arrayReadByIndex 550ms 473.8ms
largeArrayRead 827.2ms 525.8ms
arrayWrite 261.8ms 260.4ms
largeArrayWrite 2218ms 2096.6ms
interp-dispatch 2880ms 2213.2ms
wb-perf 8327ms 8993.2ms
arrayReverse 40.6ms 40.8ms
arrayMap 1472.6ms 1865.8ms
arrayIndexOf 143.2ms 139.6ms
arrayLastIndexOf 148.6ms 147.8ms
arrayEvery 2308.8ms 2909ms
arraySome 2174.4ms 2912ms
arrayFill 2401.2ms 2479.2ms
arrayFilter 1866.4ms 2208.4ms
arrayFind 3207ms 3546.8ms
arrayFindIndex 3322ms 3551.2ms
arrayPop 1031.4ms 1074ms
arrayReduce 1994.2ms 2574ms
arrayReduceRight 2075.8ms 2742.8ms
arrayShift 2065.8ms 2391.2ms
arrayUnshift 2109.4ms 2446.8ms
arrayIncludes 1216.6ms 1164.6ms
arrayFrom 1102.8ms 1112.6ms
arrayCopyWithin 1487ms 1603.8ms
stringFromCharCode 92.6ms 92.4ms
arraySlice 786.2ms 837.2ms
arraySplice 26.8ms 30ms
arrayOf 1048.8ms 1039.2ms
stringCharAt 1346.6ms 1360.2ms
stringMatch 3192.4ms 2903.2ms
stringSearch 3508.2ms 2959.2ms
stringStartsWith 701ms 593.6ms
stringEndsWith 650.4ms 554.4ms
stringIncludes 1520.6ms 1931.8ms
stringIndexOf 1555.6ms 2327ms
stringLastIndexOf 1821.4ms 1852ms
stringSplit 822ms 812.4ms
stringSlice 490ms 539ms
stringPadStart 2910.8ms 3131.6ms
stringPadEnd 2910ms 3719.8ms
regExpMatch 1506.2ms 1888.8ms
regExpSearch 1227ms 1687.4ms
regExpToString 1204ms 1272.4ms
stringReplace 1394.8ms 1908.8ms
regExpReplace 3309.2ms 923.8ms
regExpFlags 956.8ms 1028.8ms
regExpSplit 1307.8ms 1322ms
numberArrayReadWrite 2477.8ms 2397ms
protoCache 3594.6ms 2367.8ms
box2d (static) 1792.6ms 1753.6ms
earley-boyer (static) 1875.6ms 1875.6ms
navier-stokes (static) 3410.2ms 3515.4ms
pdfjs (static) 812.8ms 797.6ms
gbemu (static) 1797ms 1703.2ms
code-load (static) 4199.2ms 4255.8ms
typescript (static) 2685.6ms 2562.6ms
simpleSum (static) 936.2ms 1096.6ms
propAccess (static) 2298ms 2332.2ms
allocObj (static) 0.2ms 0.6ms
allocObjLit (static) 4154.4ms 4316.8ms
allocNewObj (static) 15749.2ms 17706.2ms
allocArray (static) 0.6ms 0.8ms
allocNewArray (static) 28494.2ms 31551ms
arrayRead (static) 74.2ms 71.6ms
arrayReadByIndex (static) 453.2ms 496.6ms
largeArrayRead (static) 552.2ms 551.2ms
arrayWrite (static) 178.4ms 181.8ms
largeArrayWrite (static) 1568.6ms 1618ms
interp-dispatch (static) 1918.8ms 2041ms
wb-perf (static) 8991.2ms 9303ms
arrayReverse (static) 37ms 41ms
arrayMap (static) 1064.8ms 1075ms
arrayIndexOf (static) 128.2ms 125.2ms
arrayLastIndexOf (static) 138.8ms 125.4ms
arrayEvery (static) 1397.6ms 1549.2ms
arraySome (static) 1406.6ms 1542.8ms
arrayFill (static) 1969.2ms 2073ms
arrayFilter (static) 1061ms 1144ms
arrayFind (static) 2242.2ms 2508.2ms
arrayFindIndex (static) 2235.8ms 2483.2ms
arrayPop (static) 878ms 919ms
arrayReduce (static) 1311.8ms 1444ms
arrayReduceRight (static) 1322.6ms 1441.6ms
arrayShift (static) 1512ms 1563.6ms
arrayUnshift (static) 1568.2ms 1622.8ms
arrayIncludes (static) 963.4ms 977.6ms
arrayFrom (static) 1030.6ms 972.8ms
arrayCopyWithin (static) 1109.6ms 1150.6ms
stringFromCharCode (static) 77ms 75.6ms
arraySlice (static) 571.6ms 600.4ms
arraySplice (static) 26ms 29.6ms
arrayOf (static) 868.8ms 806.8ms
stringCharAt (static) 1100.6ms 1119.6ms
stringMatch (static) 2227.6ms 2351.8ms
stringSearch (static) 2219.2ms 2277.6ms
stringStartsWith (static) 494.2ms 501.4ms
stringEndsWith (static) 457.8ms 462ms
stringIncludes (static) 1437.4ms 2117.6ms
stringIndexOf (static) 1440.8ms 2298.8ms
stringLastIndexOf (static) 1956.6ms 1755ms
stringSplit (static) 651.2ms 648.4ms
stringSlice (static) 445.6ms 446.8ms
stringPadStart (static) 2294.4ms 2357.6ms
stringPadEnd (static) 2499.2ms 2363.6ms
regExpMatch (static) 1483.2ms 1395.6ms
regExpSearch (static) 1296.2ms 1357.6ms
regExpToString (static) 1326.6ms 1256.4ms
stringReplace (static) 1455.6ms 1758ms
regExpReplace (static) 851.8ms 793.8ms
regExpFlags (static) 870.6ms 850.2ms
regExpSplit (static) 1200ms 1052.2ms
numberArrayReadWrite (static) 2132.8ms 2104.4ms
protoCache (static) 3595.8ms 3653.4ms
micros (60876ms, 63696ms) +4.6%
micros hermes (CI) hermes (CI)
getNodeById.js 5273ms 6845.6ms
setInsert.js 2864.8ms 2849.2ms
stringify-number.js 1823.4ms 1897.4ms
typed-array-sort.js 22381ms 22653.4ms
getNodeById.js (static) 3941ms 4094ms
setInsert.js (static) 2517.6ms 2285.4ms
stringify-number.js (static) 1663.6ms 1568.2ms
typed-array-sort.js (static) 20411.4ms 21502.4ms
jit-benches (8563ms, 6921ms) -19.2%
jit-benches hermes (CI) hermes (CI)
idisp.js 2810.2ms 2219.6ms
idispn.js 3395.8ms 2270ms
idisp.js (static) 1906ms 2042.4ms
idispn.js (static) 450.8ms 388.6ms
many-subclasses (73437ms, 79013ms) +7.6%
many-subclasses hermes (CI) hermes (CI)
many.js 19104.8ms 19530ms
many-sh-1.js 7322.8ms 8057.2ms
many-sh-2.js 7329ms 8263.4ms
many-sh-3.js 7083.6ms 7620ms
many-sh-4.js 7235ms 7993.6ms
many.js (static) 15996ms 17674.4ms
many-sh-1.js (static) 2285.2ms 2359.2ms
many-sh-2.js (static) 2387ms 2582.2ms
many-sh-3.js (static) 2347.2ms 2458.4ms
many-sh-4.js (static) 2346ms 2474.8ms
map-objects (3627ms, 3591ms) -1.0%
map-objects hermes (CI) hermes (CI)
map-objects-untyped.js 1023.6ms 1000.6ms
map-objects-typed.js 957.6ms 917.8ms
map-objects-untyped.js (static) 917.2ms 931.2ms
map-objects-typed.js (static) 728.8ms 741.8ms
map-strings (4335ms, 4127ms) -4.8%
map-strings hermes (CI) hermes (CI)
map-strings-untyped.js 1196.8ms 1133.6ms
map-strings-typed.js 1139.2ms 1051.6ms
map-strings-untyped.js (static) 1092.2ms 1063ms
map-strings-typed.js (static) 906.8ms 878.6ms
nbody (3448ms, 3019ms) -12.5%
nbody hermes (CI) hermes (CI)
original/nbody.js 839.6ms 696ms
fully-typed/nbody.js 710ms 588.8ms
fully-typed/nbody.ts 865.2ms 699.4ms
original/nbody.js (static) 449.2ms 456.6ms
fully-typed/nbody.js (static) 135ms 126ms
fully-typed/nbody.ts (static) 449.2ms 452ms
string-switch (6503ms, 5808ms) -10.7%
string-switch (string-switch/plain) hermes (CI) hermes (CI)
bench.js 1316ms 1387.2ms
bench.js (static) 5187ms 4420.8ms
raytracer (5608ms, 5613ms) +0.1%
raytracer (raytracer/original) hermes (CI) hermes (CI)
bench-raytracer.js 1550.4ms 1530.6ms
raytracer.ts 1667.6ms 1592.2ms
bench-raytracer.js (static) 1198.4ms 1237ms
raytracer.ts (static) 1191.8ms 1253.4ms
MiniReact (30332ms, 29039ms) -4.3%
MiniReact hermes (CI) hermes (CI)
no-objects/out/simple-stripped.js 2239.2ms 2018.6ms
no-objects/out/simple-lowered.js 2270.8ms 2034.8ms
no-objects/out/music-stripped.js 42.6ms 42.2ms
no-objects/out/music-lowered.js 47.2ms 47.2ms
no-deps/stripped/MiniReact.js 5004ms 4827.4ms
no-deps/MiniReact.js 5256.2ms 4771.2ms
no-objects/out/simple.js 2260.4ms 2020.6ms
no-objects/out/music.js 45.6ms 46.2ms
no-objects/out/simple-stripped.js (static) 1725.2ms 1696.4ms
no-objects/out/simple-lowered.js (static) 1725.4ms 1729.6ms
no-objects/out/music-stripped.js (static) 18.8ms 19.4ms
no-objects/out/music-lowered.js (static) 19.4ms 19ms
no-deps/stripped/MiniReact.js (static) 4024.8ms 4069.8ms
no-deps/MiniReact.js (static) 3938.2ms 3998.8ms
no-objects/out/simple.js (static) 1695.2ms 1679.2ms
no-objects/out/music.js (static) 19ms 19ms
widgets (12934ms, 13157ms) +1.7%
widgets hermes (CI) hermes (CI)
simple-classes/widgets.js 1758.2ms 1717.2ms
original/es5/widgets.js 2798.8ms 2887ms
single-file/es5/widgets.js 2775.2ms 2901.6ms
simple-classes/widgets.js (static) 1012ms 1032.2ms
original/es5/widgets.js (static) 2283.2ms 2295.2ms
single-file/es5/widgets.js (static) 2306.2ms 2323.4ms

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.2 to 3.15.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.2...3.15.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tools/hermes-parser/js/js-yaml-3.15.0 branch from c00e138 to 9077579 Compare July 14, 2026 18:19
@vmoroz

Copy link
Copy Markdown
Member

I am going to add this change into the grouped dependabot PR #346.

@dependabot @github

dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/tools/hermes-parser/js/js-yaml-3.15.0 branch July 16, 2026 20:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant