This is an automated email from the ASF dual-hosted git repository.
FreeAndNil pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/logging-log4net.git
The following commit(s) were added to refs/heads/master by this push:
new 1acfaa6a bump js-yaml override to ^4.3.1 (#308) (#308)
1acfaa6a is described below
commit 1acfaa6a3e09770e22cc1b57f5902fda06bbfadc
Author: Jan Friedrich <[email protected]>
AuthorDate: Mon Aug 17 09:02:17 2026 +0200
bump js-yaml override to ^4.3.1 (#308) (#308)
Fixes quadratic CPU in !!omap resolution pulled in transitively via Antora.
https://github.com/apache/logging-log4net/security/dependabot/81
---
package-lock.json | 6 +++---
package.json | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 05cb8e97..5e0a4cee 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1141,9 +1141,9 @@
}
},
"node_modules/js-yaml": {
- "version": "4.3.0",
- "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz";,
- "integrity":
"sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+ "version": "4.3.1",
+ "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz";,
+ "integrity":
"sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
"dev": true,
"funding": [
{
diff --git a/package.json b/package.json
index 24fac003..3ac1f1bc 100644
--- a/package.json
+++ b/package.json
@@ -18,6 +18,6 @@
"@asciidoctor/tabs": "^1.0.0-beta.6"
},
"overrides": {
- "js-yaml": "^4.3.0"
+ "js-yaml": "^4.3.1"
}
}
