Skip to content

Conversation

@dependabot-preview
Copy link
Contributor

@dependabot-preview dependabot-preview bot commented May 25, 2020

Bumps js-yaml from 3.13.1 to 3.14.0.

Changelog

Sourced from js-yaml's changelog.

[3.14.0] - 2020-05-22

Changed

  • Support safe/loadAll(input, options) variant of call.
  • CI: drop outdated nodejs versions.
  • Dev deps bump.

Fixed

  • Quote = in plain scalars #519.
  • Check the node type for !<?> tag in case user manually specifies it.
  • Verify that there are no null-bytes in input.
  • Fix wrong quote position when writing condensed flow, #526.
Commits
  • 34e5072 3.14.0 released
  • 7b25c83 Browser files rebuild
  • 6f73473 Dev deps bump
  • 0c29349 Travis-CI: drop old nodejs versions
  • 10be97e fix(loader): Add support for safe/loadAll(input, options)
  • d6983dd Fix issue #526: wrong quote position writing condensed flow (#527)
  • 93fbf7d fix issue 526 (wrong quote position writing condensed flow)
  • e569cc7 readme: update titelift info
  • 8fb2905 changelog format update
  • 33c2236 Verify that there are no null-bytes in input
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @DotGav.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label May 25, 2020
@dependabot-preview dependabot-preview bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.14.0 branch from 21e8fc6 to a551ada Compare May 26, 2020 08:59
@dependabot-preview dependabot-preview bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.14.0 branch 5 times, most recently from f225fae to d850b1c Compare July 14, 2020 09:35
@dependabot-preview dependabot-preview bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.14.0 branch 3 times, most recently from 9b1b9ea to 4681ced Compare August 24, 2020 10:43
DotGav
DotGav previously approved these changes Sep 14, 2020
DotGav
DotGav previously approved these changes Sep 14, 2020
@dependabot-preview
Copy link
Contributor Author

Dependabot tried to merge this PR, but received the following error from GitHub:

At least 1 approving review is required by reviewers with write access.

@dependabot-preview dependabot-preview bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.14.0 branch from f9e11f0 to 3a57c59 Compare September 14, 2020 10:54
@dependabot-preview dependabot-preview bot force-pushed the dependabot/npm_and_yarn/js-yaml-3.14.0 branch from 3a57c59 to c58c84c Compare September 14, 2020 11:01
@dependabot-preview dependabot-preview bot merged commit 3c2bc93 into master Sep 14, 2020
@dependabot-preview dependabot-preview bot deleted the dependabot/npm_and_yarn/js-yaml-3.14.0 branch September 14, 2020 11:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants