Title: Bump the npm-minor group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4119 · github/codeql-action · GitHub
Open Graph Title: Bump the npm-minor group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4119 · github/codeql-action
X Title: Bump the npm-minor group across 1 directory with 2 updates by dependabot[bot] · Pull Request #4119 · github/codeql-action
Description: Bumps the npm-minor group with 2 updates in the / directory: js-yaml and typescript-eslint.
Updates js-yaml from 5.3.0 to 5.4.0
Changelog
Sourced from js-yaml's changelog.
[5.4.0] - 2026-08-25
Added
Added the scalarStyleRules dumper option to customize string formatting.
See Scalar styling for details.
Changed
[breaking] Flattened the low-level AST node style representation. Scalar
and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values;
explicit tags use the separate tagged property. Alias nodes now contain
only kind and anchor. This only affects code that directly constructs or
edits AST nodes.
[breaking] The sortKeys option was rewritten using AST mutation to avoid
side effects.
Reworked scalar style selection. This can change formatting without changing
loaded values; in particular, whitespace-only strings are now double-quoted.
Fixed
Accept a byte order mark at the start of each document in a stream, #791.
Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace,
including alias and property-only keys, #786.
Preserve empty scalar items when converting block sequences to flow style.
Do not apply the 1024-character simple-key limit to flow mapping keys.
Count Unicode code points, rather than UTF-16 code units, for the
1024-character simple-key limit.
Add an explicit document-end marker after keep-chomped block scalars when
needed to preserve trailing newlines.
Commits
6b4ff5e 5.4.0 released
3b3625e Update changelog
4f25a74 Fix file name
3bd003b Expose new scalar styling API
fbb3e9d Remove regex lookbehind for ES2015 compatibility
d43c185 Fix flowSkipColonSpace by forcing quoteFlowKeys
a5fdb31 Add automatic double quoting for whitespace-only strings, close #534
25dcf77 Fix keep-chomped scalar test expectations
9f50a42 Fix open-ended tracking for document end markers
31aad6d Fix simple key length limit for astral characters
Additional commits viewable in compare view
Updates typescript-eslint from 8.67.0 to 8.68.0
Release notes
Sourced from typescript-eslint's releases.
v8.68.0
8.68.0 (2026-08-24)
🚀 Features
eslint-plugin: [strict-void-return] add fix suggestions (#12086)
utils: support ESLint rule meta.languages (#12663)
🩹 Fixes
eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
eslint-plugin: [unified-signatures] report identical signatures (#12678)
eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
website: playground crashes on extends configs (#12608)
website: account for thanks.dev and out-of-band donors in sponsors list (#12735)
❤️ Thank You
Evyatar Daud @StyleShit
Hugo @hugop95
Josh Goldberg ✨
Niki @phaux
Thiago Barbosa
Younsang Na @nayounsang
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
Changelog
Sourced from typescript-eslint's changelog.
8.68.0 (2026-08-24)
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
Commits
8f4e00a chore(release): publish 8.68.0
55f6d5d chore: enable source maps (#12677)
See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show
Open Graph Description: Bumps the npm-minor group with 2 updates in the / directory: js-yaml and typescript-eslint. Updates js-yaml from 5.3.0 to 5.4.0 Changelog Sourced from js-yaml's changelog. [5.4.0] - 2026-08-2...
X Description: Bumps the npm-minor group with 2 updates in the / directory: js-yaml and typescript-eslint. Updates js-yaml from 5.3.0 to 5.4.0 Changelog Sourced from js-yaml's changelog. [5.4.0] - 2026-...
Opengraph URL: https://github.com/github/codeql-action/pull/4119
X: @github
Domain: github.com
| react-profiling | 0 |
| react-import-map | react,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf |
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:4a790f87-c7da-8792-dad8-d4f4e3382231 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | B6DE:39BC20:7017B3:960DD1:6AED2393 |
| html-safe-nonce | aa3f9e26ddad9cd16b6e5852e9f181f0f81103262b6bb2fbf4e75d9e96a8e627 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCNkRFOjM5QkMyMDo3MDE3QjM6OTYwREQxOjZBRUQyMzkzIiwidmlzaXRvcl9pZCI6IjY5MjI4ODE3MDg3MDI1MjQzNSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | b9e5096a5f6f445a2b2a8fbb75fc80c76475e5e54bf18ee8b49f008288a47b13 |
| hovercard-subject-tag | pull_request:4425122700 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/github/codeql-action/pull/4119/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps the npm-minor group with 2 updates in the / directory: js-yaml and typescript-eslint. Updates js-yaml from 5.3.0 to 5.4.0 Changelog Sourced from js-yaml's changelog. [5.4.0] - 2026-08-2... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | e3e0f7f63e50c6fe879198a93a0a023a648ecc0a5e9bc3b5e033ac57172237e6 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/github/codeql-action git https://github.com/github/codeql-action.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 259445878 |
| octolytics-dimension-repository_nwo | github/codeql-action |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 259445878 |
| octolytics-dimension-repository_network_root_nwo | github/codeql-action |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 707a24b346ac8a82878b9c084efaa38a997660cb |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width