From f011e1fc155f5d5e3b8f21f2cd25f36eb79a22f4 Mon Sep 17 00:00:00 2001 From: Otto van der Schaaf Date: Tue, 27 Oct 2026 17:31:44 +0100 Subject: [PATCH] Bump skill-harness js-yaml 4.2.0 -> 4.3.2 Clears GHSA-52cp-r559-cp3m (fixed 4.3.0), GHSA-5p4m-2wfm-xmqj (4.3.1) and GHSA-2883-xcg3-v3hh (4.3.2). Lockfile change is limited to js-yaml. --- skill-harness/package.json | 2 +- skill-harness/pnpm-lock.yaml | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/skill-harness/package.json b/skill-harness/package.json index cdcbf52..5d8d30f 100644 --- a/skill-harness/package.json +++ b/skill-harness/package.json @@ -22,7 +22,7 @@ }, "dependencies": { "@anthropic-ai/sdk": "0.91.1", - "js-yaml": "4.2.0", + "js-yaml": "4.3.2", "zod": "4.3.6" }, "devDependencies": { diff --git a/skill-harness/pnpm-lock.yaml b/skill-harness/pnpm-lock.yaml index 9927198..f381555 100644 --- a/skill-harness/pnpm-lock.yaml +++ b/skill-harness/pnpm-lock.yaml @@ -15,8 +15,8 @@ importers: specifier: 0.91.1 version: 0.91.1(zod@4.3.6) js-yaml: - specifier: 4.2.0 - version: 4.2.0 + specifier: 4.3.2 + version: 4.3.2 zod: specifier: 4.3.6 version: 4.3.6 @@ -283,8 +283,8 @@ packages: get-tsconfig@4.14.0: resolution: {integrity: sha512-yTb+8DXzDREzgvYmh6s9vHsSVCHeC0G3PI5bEXNBHtmshPnO+S5O7qgLEOn0I5QvMy6kpZN8K1NKGyilLb93wA==} - js-yaml@4.2.0: - resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==} + js-yaml@4.3.2: + resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==} hasBin: true json-schema-to-ts@3.1.1: @@ -480,7 +480,7 @@ snapshots: dependencies: resolve-pkg-maps: 1.0.0 - js-yaml@4.2.0: + js-yaml@4.3.2: dependencies: argparse: 2.0.1