Title: Bump js-yaml by dependabot[bot] · Pull Request #680 · actions/github-script · GitHub
Open Graph Title: Bump js-yaml by dependabot[bot] · Pull Request #680 · actions/github-script
X Title: Bump js-yaml by dependabot[bot] · Pull Request #680 · actions/github-script
Description: Bumps and js-yaml. These dependencies needed to be updated together.
Updates js-yaml from 4.1.0 to 4.1.1
Changelog
Sourced from js-yaml's changelog.
[4.1.1] - 2025-11-12
Security
Fix prototype pollution issue in yaml merge (<<) operator.
Commits
cc482e7 4.1.1 released
50968b8 dist rebuild
d092d86 lint fix
383665f fix prototype pollution in merge (<<)
0d3ca7a README.md: HTTP => HTTPS (#678)
49baadd doc: 'empty' style option for !!null
ba3460e Fix demo link (#618)
See full diff in compare view
Updates js-yaml from 3.14.0 to 3.14.2
Changelog
Sourced from js-yaml's changelog.
[4.1.1] - 2025-11-12
Security
Fix prototype pollution issue in yaml merge (<<) operator.
Commits
cc482e7 4.1.1 released
50968b8 dist rebuild
d092d86 lint fix
383665f fix prototype pollution in merge (<<)
0d3ca7a README.md: HTTP => HTTPS (#678)
49baadd doc: 'empty' style option for !!null
ba3460e Fix demo link (#618)
See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show
Open Graph Description: Bumps and js-yaml. These dependencies needed to be updated together. Updates js-yaml from 4.1.0 to 4.1.1 Changelog Sourced from js-yaml's changelog. [4.1.1] - 2025-11-12 Security Fix protot...
X Description: Bumps and js-yaml. These dependencies needed to be updated together. Updates js-yaml from 4.1.0 to 4.1.1 Changelog Sourced from js-yaml's changelog. [4.1.1] - 2025-11-12 Security Fix pr...
Opengraph URL: https://github.com/actions/github-script/pull/680
X: @github
Domain: patch-diff.githubusercontent.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:b031be00-affa-dd28-c893-969c717883c5 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | B3B0:25F30A:62B93:83B83:6973481A |
| html-safe-nonce | db6d9cf2b9a971d1a837d658d4d1fe0c218a70aefb400eb3905037e9ef99e63e |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCM0IwOjI1RjMwQTo2MkI5Mzo4M0I4Mzo2OTczNDgxQSIsInZpc2l0b3JfaWQiOiI3MzA3MTQxNDI0NzM3NjkyMiIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9 |
| visitor-hmac | 11464683ede18401a9e3135520dfc836e28c9ba213a5fed7559cbb77f1bbd107 |
| hovercard-subject-tag | pull_request:3022848184 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,actions,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/actions/github-script/pull/680/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Bumps and js-yaml. These dependencies needed to be updated together. Updates js-yaml from 4.1.0 to 4.1.1 Changelog Sourced from js-yaml's changelog. [4.1.1] - 2025-11-12 Security Fix protot... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 9c6b49fea3d431063963fbeee3309a15cb4096903286e532f663096b47b63bc6 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/actions/github-script git https://github.com/actions/github-script.git |
| octolytics-dimension-user_id | 44036562 |
| octolytics-dimension-user_login | actions |
| octolytics-dimension-repository_id | 205262760 |
| octolytics-dimension-repository_nwo | actions/github-script |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 205262760 |
| octolytics-dimension-repository_network_root_nwo | actions/github-script |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 814e1d7d82db0f7eb6982bfa0395502441bb14ad |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width