René's URL Explorer Experiment

Title: Bump the npm-minor group across 1 directory with 4 updates by dependabot[bot] · Pull Request #3957 · github/codeql-action · GitHub

Open Graph Title: Bump the npm-minor group across 1 directory with 4 updates by dependabot[bot] · Pull Request #3957 · github/codeql-action

X Title: Bump the npm-minor group across 1 directory with 4 updates by dependabot[bot] · Pull Request #3957 · github/codeql-action

Description: Bumps the npm-minor group with 4 updates in the / directory: js-yaml, eslint-import-resolver-typescript, typescript-eslint and tsx. Updates js-yaml from 4.1.1 to 4.2.0 Changelog Sourced from js-yaml's changelog. [4.2.0] - 2026-06-01 Added Added docs/safety.md with notes about processing untrusted YAML. Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow. Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety. Added sourcemaps to dist/ builds. Changed Stop resolving numbers with underscores as numeric scalars, #627. Switched dev toolchains to Vite / neostandard. Updated demo. Reorganized tests. dist/ files are no longer kept in the repository. Fixed Fix parsing of properties on the first implicit block mapping key, #62. Fix trailing whitespace handling when folding flow scalar lines, #307. Reject top-level block scalars without content indentation, #280. Ensure numbers survive round-trip, #737. Fix test coverage for issue #221. Fix flow scalar trailing whitespace folding, #307. Fix digits in YAML named tag handles. Security Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K). [3.14.2] - 2025-11-15 Security Backported v4.1.1 fix to v3 Commits See full diff in compare view Updates eslint-import-resolver-typescript from 4.4.4 to 4.4.5 Release notes Sourced from eslint-import-resolver-typescript's releases. v4.4.5 Patch Changes #473 32c61ab Thanks @​leey0818! - fix: check tsconfig matching before using resolver Changelog Sourced from eslint-import-resolver-typescript's changelog. 4.4.5 Patch Changes #473 32c61ab Thanks @​leey0818! - fix: check tsconfig matching before using resolver Commits 724c47d chore: release eslint-import-resolver-typescript (#480) 32c61ab fix: check tsconfig matching before using resolver (#473) See full diff in compare view Maintainer changes This version was pushed to npm by GitHub Actions, a new releaser for eslint-import-resolver-typescript since your current version. Updates typescript-eslint from 8.60.0 to 8.60.1 Release notes Sourced from typescript-eslint's releases. v8.60.1 8.60.1 (2026-06-01) 🩹 Fixes eslint-plugin: respect ECMAScript line terminators in ts-comment rules (#12352) eslint-plugin: [no-shadow] correct rule to match ESLint v10 handling (#12182) ❤️ Thank You lumir Nevette Bailey @​nevette-bailey See GitHub Releases for more information. You can read about our versioning strategy and releases on our website. Changelog Sourced from typescript-eslint's changelog. 8.60.1 (2026-06-01) This was a version bump only for typescript-eslint to align it with other projects, there were no code changes. See GitHub Releases for more information. You can read about our versioning strategy and releases on our website. Commits 4f84a69 chore(release): publish 8.60.1 1849b53 chore: typecheck using tsgo (#12139) See full diff in compare view Updates tsx from 4.22.3 to 4.22.4 Release notes Sourced from tsx's releases. v4.22.4 4.22.4 (2026-05-31) Bug Fixes resolve CommonJS directory requires inside dependencies (#803) (1ce8463) This release is also available on: npm package (@​latest dist-tag) Commits 1ce8463 fix: resolve CommonJS directory requires inside dependencies (#803) See full diff in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore will remove all of the ignore conditions of the specified dependency @dependabot unignore will remove the ignore condition of the specified dependency and ignore conditions

Open Graph Description: Bumps the npm-minor group with 4 updates in the / directory: js-yaml, eslint-import-resolver-typescript, typescript-eslint and tsx. Updates js-yaml from 4.1.1 to 4.2.0 Changelog Sourced from js-ya...

X Description: Bumps the npm-minor group with 4 updates in the / directory: js-yaml, eslint-import-resolver-typescript, typescript-eslint and tsx. Updates js-yaml from 4.1.1 to 4.2.0 Changelog Sourced from js-ya...

Opengraph URL: https://github.com/github/codeql-action/pull/3957

X: @github

direct link

Domain: github.com

Links:

Viewport: width=device-width