This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch release/v1.2
in repository https://gitbox.apache.org/repos/asf/texera.git
The following commit(s) were added to refs/heads/release/v1.2 by this push:
new 2e9d355729 fix(deps, frontend, v1.2): bump hono to 4.13.1 and js-yaml
to 4.3.1 (#8706)
2e9d355729 is described below
commit 2e9d355729a65fc21c6c4297555f465d4e9cb223
Author: Xuan Gu <[email protected]>
AuthorDate: Sun Sep 27 07:02:14 2026 +0000
fix(deps, frontend, v1.2): bump hono to 4.13.1 and js-yaml to 4.3.1 (#8706)
### What changes were proposed in this PR?
Backport of #7587 and #7588 to release/v1.2: two lockfile-only bumps of
transitive
frontend dependencies, hono 4.12.31 -> 4.13.1 and js-yaml 4.2.0 ->
4.3.1, matching
the versions main has used since 2026-08-12.
Both originals are Dependabot security updates. They merged with the
release/v1.2
label before the direct-backport automation went live (its first run was
2026-09-04),
so no backport was ever pushed or drafted.
### Any related issues, documentation, discussions?
Backport of #7587 and #7588.
### How was this PR tested?
Both cherry-picks applied cleanly; release-branch CI runs on this PR.
### Was this PR authored or co-authored using generative AI tooling?
Generated-by: Claude Fable 5
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xinyuan Lin <[email protected]>
---
frontend/yarn.lock | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/frontend/yarn.lock b/frontend/yarn.lock
index 674599a08f..a6be149a4b 100644
--- a/frontend/yarn.lock
+++ b/frontend/yarn.lock
@@ -10793,9 +10793,9 @@ __metadata:
linkType: hard
"hono@npm:^4.11.4":
- version: 4.12.31
- resolution: "hono@npm:4.12.31"
- checksum:
10c0/f80be65cd657cc353b3e478d55424a373d11801b2a1ffc96d94def813c6d852e76bea4437f5df252b15caca98742040d26950bc9c865d8720b89a00a9eac5249
+ version: 4.13.1
+ resolution: "hono@npm:4.13.1"
+ checksum:
10c0/83524961f806293464e6c3b31a7fd2ab8cd8e9cb66e65dea1fbbefb70744844c13b7409ed9b49b43e8543e5c0f1b851f2586fa759eea9da0b69503b58cd0d985
languageName: node
linkType: hard
@@ -11624,13 +11624,13 @@ __metadata:
linkType: hard
"js-yaml@npm:^4.1.0":
- version: 4.2.0
- resolution: "js-yaml@npm:4.2.0"
+ version: 4.3.1
+ resolution: "js-yaml@npm:4.3.1"
dependencies:
argparse: "npm:^2.0.1"
bin:
js-yaml: bin/js-yaml.js
- checksum:
10c0/1916456c118746603b067d74bbcbb0445d9a1d5e474ad4ae775e7b20525bed902e01d9d97dd0c81fcd8d4f596162309d0eb057f4aa38f3e9647f14075e9dea45
+ checksum:
10c0/13c500ca322e0c3f8c81686e6ecda96d2ea37b45247a420c17c7db36932d6965cc27391abc2d1a104501600e7f0d947a5f8b7be6db619c4fefa87901b3512807
languageName: node
linkType: hard
