Skip to content

chore(deps): bump js-yaml from 3.14.2 to 3.15.2 - #259

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.2
Open

chore(deps): bump js-yaml from 3.14.2 to 3.15.2#259
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/js-yaml-3.15.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 3.14.2 to 3.15.2.

Changelog

Sourced from js-yaml's changelog.

3.15.2 - 2026-08-26

Changed

  • [backport] Hard-limit merge sequence size to 100.

Security

  • [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

3.15.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.

3.15.0 - 2026-06-27

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one safeLoad() / safeLoadAll() call.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.2 to 3.15.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.2...3.15.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 2, 2026

@adesege adesege left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Benchmark

Details
Benchmark suite Current: 0584263 Previous: ccb3f17 Ratio
test/benchmarks/request-response.bench.ts > Request/Response > simple GET - 200 49300.69698257823 ops/sec (±0.91%) 44355.827899388205 ops/sec (±1.52%) 0.90
test/benchmarks/request-response.bench.ts > Request/Response > GET with route params - 200 49745.58939990492 ops/sec (±1.21%) 49077.55133303189 ops/sec (±1.07%) 0.99
test/benchmarks/request-response.bench.ts > Request/Response > POST with JSON body - 201 24785.436081758224 ops/sec (±1.10%) 24127.579263272528 ops/sec (±1.28%) 0.97
test/benchmarks/request-response.bench.ts > Request/Response > POST invalid body - validation error 4416.919594965469 ops/sec (±2.94%) 4332.798367697519 ops/sec (±3.08%) 0.98
test/benchmarks/request-response.bench.ts > Request/Response > GET unknown route - 404 7044.720904114838 ops/sec (±1.36%) 6877.491973422911 ops/sec (±1.38%) 0.98
src/__benchmarks__/application.bench.ts > Application - Bootstrap > constructor only 397779.3293440331 ops/sec (±0.28%) 367439.1967778971 ops/sec (±2.58%) 0.92
src/__benchmarks__/application.bench.ts > Application - Bootstrap > full initialize() 41473.99742860967 ops/sec (±1.40%) 40916.51636711715 ops/sec (±2.82%) 0.99
src/__benchmarks__/application.bench.ts > Application - Service Resolution > resolve service after bootstrap 45585.176914042866 ops/sec (±1.49%) 46221.77899438597 ops/sec (±1.51%) 1.01
src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > initialize with 5 controllers (8 routes) 43803.83704972795 ops/sec (±0.86%) 47297.584538015675 ops/sec (±0.94%) 1.08
src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > resolve service after multi-controller bootstrap 46857.52008527519 ops/sec (±0.91%) 46712.398512126 ops/sec (±0.86%) 1.00
src/di/__benchmarks__/container.bench.ts > Container - Registration > register class provider 3885732.9042246854 ops/sec (±0.17%) 3659523.004609583 ops/sec (±0.26%) 0.94
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerSingleton 3642763.4792070678 ops/sec (±0.21%) 3674735.919157303 ops/sec (±0.23%) 1.01
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerValue 3982106.581459792 ops/sec (±0.81%) 3643329.0527346027 ops/sec (±0.97%) 0.91
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerFactory 4021308.0931006535 ops/sec (±0.67%) 3731349.291036125 ops/sec (±0.79%) 0.93
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve class token 1243513.4230101441 ops/sec (±0.52%) 1231183.1036989056 ops/sec (±0.71%) 0.99
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve symbol token 1226350.4964958522 ops/sec (±0.52%) 1316018.4734202325 ops/sec (±0.72%) 1.07
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve value token 1594852.0574706446 ops/sec (±0.17%) 1783899.5774658315 ops/sec (±0.30%) 1.12
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve singleton token 1178901.4341266225 ops/sec (±1.27%) 1315930.5814242992 ops/sec (±0.55%) 1.12
src/di/__benchmarks__/container.bench.ts > Container - Resolution > isRegistered check 1648443.515360015 ops/sec (±0.16%) 1806360.778904609 ops/sec (±0.19%) 1.10
src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when().use().give().otherwise() 2078665.3057223088 ops/sec (±0.47%) 1989351.3462046375 ops/sec (±2.25%) 0.96
src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when() with cached predicate 2144609.1035531615 ops/sec (±0.61%) 2077218.3049918814 ops/sec (±0.64%) 0.97
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register single module 1313375.0254754475 ops/sec (±0.62%) 1318623.2747570868 ops/sec (±0.43%) 1.00
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register 3-level module tree 717466.8821865682 ops/sec (±0.39%) 674368.8967327109 ops/sec (±0.61%) 0.94
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register dynamic module (forRoot) 1062030.2342814058 ops/sec (±0.36%) 1033574.8692689876 ops/sec (±0.46%) 0.97
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Initialization > initialize with lifecycle hooks 878573.4710984196 ops/sec (±0.52%) 861264.3797109328 ops/sec (±0.67%) 0.98
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllControllers 617309.7543105981 ops/sec (±0.45%) 601067.2979531069 ops/sec (±0.70%) 0.97
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllConsumers 567125.849144502 ops/sec (±2.23%) 598005.5897686194 ops/sec (±2.06%) 1.05
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllJobs 578156.1394937924 ops/sec (±0.40%) 606220.5693193878 ops/sec (±0.44%) 1.05
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register controller with 5 OpenAPI routes 20685.28275850585 ops/sec (±6.90%) 20659.201604495036 ops/sec (±7.81%) 1.00
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register single-route controller 91315.19259106535 ops/sec (±8.51%) 87549.06480088776 ops/sec (±9.59%) 0.96
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register multiple controllers 20125.885081195767 ops/sec (±6.65%) 20055.348642388202 ops/sec (±7.48%) 1.00
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 10 routes by specificity 314869.0938068107 ops/sec (±1.49%) 348297.84898624144 ops/sec (±1.02%) 1.11
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 50 routes by specificity 65071.793592265596 ops/sec (±0.43%) 66342.982298651 ops/sec (±0.49%) 1.02
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 100 routes by specificity 32576.366686124526 ops/sec (±0.47%) 32949.193140155745 ops/sec (±0.54%) 1.01
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - static path 13095957.135647265 ops/sec (±0.10%) 12503091.774915366 ops/sec (±0.09%) 0.95
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - single param 1867903.088460718 ops/sec (±1.38%) 2209847.5226742206 ops/sec (±1.46%) 1.18
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - multiple params 1282825.8204041517 ops/sec (±0.44%) 1332989.981337998 ops/sec (±0.60%) 1.04

This comment was automatically generated by workflow using github-action-benchmark.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant