From eab07aeeefafdc99be795819269e05a3f5db0f09 Mon Sep 17 00:00:00 2001 From: Greg Orzell Date: Mon, 31 Aug 2026 09:31:36 +0200 Subject: [PATCH 1/2] chore(deps): update js-yaml to 3.15.1 Resolve three Dependabot alerts for quadratic CPU denial-of-service vulnerabilities in js-yaml 3.x. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- crates/string-offsets/js/package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/crates/string-offsets/js/package-lock.json b/crates/string-offsets/js/package-lock.json index 522e0b1..3c44155 100644 --- a/crates/string-offsets/js/package-lock.json +++ b/crates/string-offsets/js/package-lock.json @@ -3181,9 +3181,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "3.14.2", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz", - "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==", + "version": "3.15.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz", + "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==", "dev": true, "license": "MIT", "dependencies": { From 9f8c9721dc9e49f767ef58fd9211339785a3051a Mon Sep 17 00:00:00 2001 From: Greg Orzell Date: Mon, 31 Aug 2026 09:36:51 +0200 Subject: [PATCH 2/2] ci: retry CodeQL analysis Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>