Skip to content

fix(lambda): bump js-yaml from 3.15.0 to 3.15.1 in /lambdas - #5264

Merged
edersonbrilhante merged 1 commit into
mainfrom
dependabot/npm_and_yarn/lambdas/js-yaml-3.15.1
Aug 17, 2026
Merged

fix(lambda): bump js-yaml from 3.15.0 to 3.15.1 in /lambdas#5264
edersonbrilhante merged 1 commit into
mainfrom
dependabot/npm_and_yarn/lambdas/js-yaml-3.15.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 3.15.0 to 3.15.1.

Changelog

Sourced from js-yaml's changelog.

3.15.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 9, 2026 17:41
@github-actions

github-actions Bot commented Aug 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/js-yaml 3.15.1 🟢 6.1
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 1Found 3/30 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 27 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 4security policy file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • lambdas/yarn.lock

@edersonbrilhante

edersonbrilhante commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/js-yaml-3.15.1 branch from a984a3a to 5b2ec78 Compare August 17, 2026 11:04
@edersonbrilhante

edersonbrilhante commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
fix(lambda): bump js-yaml from 3.15.0 to 3.15.1 in /lambdas
0aac33d 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.15.0 to 3.15.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.1/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.15.0...3.15.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/lambdas/js-yaml-3.15.1 branch from 5b2ec78 to 0aac33d Compare August 17, 2026 11:08
@edersonbrilhante
edersonbrilhante merged commit a3116bd into main Aug 17, 2026
8 of 9 checks passed
@edersonbrilhante
edersonbrilhante deleted the dependabot/npm_and_yarn/lambdas/js-yaml-3.15.1 branch August 17, 2026 12:01
@runners-releaser runners-releaser Bot mentioned this pull request Aug 17, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@edersonbrilhante edersonbrilhante edersonbrilhante approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@edersonbrilhante