Skip to content

fix(deps): bump js-yaml override to 3.15.1 - #355

Merged
thomasrockhu-codecov merged 1 commit into
mainfrom
th/js-yaml-3.15.1
Aug 12, 2026
Merged

fix(deps): bump js-yaml override to 3.15.1#355
thomasrockhu-codecov merged 1 commit into
mainfrom
th/js-yaml-3.15.1

Conversation

@thomasrockhu-codecov

Copy link
Copy Markdown
Contributor

Summary

  • Floor the js-yaml 3.x pnpm.overrides from 3.15.0 to 3.15.1 so Dependabot alert #796 (CVE-2026-59870 !!omap quadratic CPU) closes.
  • Leave the 4.x override at 4.3.1 (already patched). Lockfile now resolves only 3.15.1 / 4.3.1.

Test plan

  • CI green on this branch
  • Confirm Dependabot alert #796 closes after merge

Made with Cursor

Floor the 3.x pnpm override past 3.15.0 so Dependabot alert #796
(CVE-2026-59870 !!omap quadratic CPU) closes. 4.x already resolves to 4.3.1.
@codecov-notifications

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

Components Coverage Δ
Plugin core 97.70% <ø> (ø)
Rollup plugin 9.27% <ø> (ø)
Vite plugin 9.27% <ø> (ø)
Webpack plugin 57.28% <ø> (ø)

📢 Thoughts on this report? Let us know!

@codecov

codecov Bot commented Aug 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.43%. Comparing base (e5063ae) to head (49b52dd).
✅ All tests successful. No failed tests found.

Additional details and impacted files
Components Coverage Δ
Plugin core 97.70% <ø> (ø)
Rollup plugin 9.27% <ø> (ø)
Vite plugin 9.27% <ø> (ø)
Webpack plugin 57.28% <ø> (ø)

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@codecov

codecov Bot commented Aug 12, 2026

Copy link
Copy Markdown

Bundle Report

Changes will decrease total bundle size by 1.55MB (-12.64%) ⬇️. This is within the configured threshold ✅

Detailed changes
Bundle name Size Change
@codecov/bundler-plugin-core-esm 14.67kB -1.54MB (-99.05%) ⬇️
@codecov/rollup-plugin-esm 1.3kB -5.11kB (-79.7%) ⬇️
@codecov/webpack-plugin-esm 3.45kB -5.43kB (-61.16%) ⬇️
@codecov/nextjs-webpack-plugin-esm 4.86kB 3.74kB (336.0%) ⬆️
@codecov/bundle-analyzer-esm 3.11kB -3.79kB (-54.96%) ⬇️

Affected Assets, Files, and Routes:

view changes for bundle: @codecov/nuxt-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.mts (New) 830 bytes 830 bytes 100.0% 🚀
index.d.ts (Deleted) -830 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-next-15-app-client-array-push

Assets Changed:

Asset Name Size Change Total Size Change (%)
static/LNOGII2eo4rPCetcMtLUm/_buildManifest.js (New) 543 bytes 543 bytes 100.0% 🚀
static/LNOGII2eo4rPCetcMtLUm/_ssgManifest.js (New) 77 bytes 77 bytes 100.0% 🚀
static/G4El29_m5SaJXD_VLmXMy/_buildManifest.js (Deleted) -543 bytes 0 bytes -100.0% 🗑️
static/G4El29_m5SaJXD_VLmXMy/_ssgManifest.js (Deleted) -77 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-sveltekit-app-client-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
_app/*.rsXv0JQ7.js (New) 16.52kB 16.52kB 100.0% 🚀
_app/*.DIwK3tRx.js (New) 6.5kB 6.5kB 100.0% 🚀
_app/*.AHx8ug96.js (New) 6.5kB 6.5kB 100.0% 🚀
_app/*.DhKOXW3t.js (New) 534 bytes 534 bytes 100.0% 🚀
_app/*.X6RqjLQc.js (New) 83 bytes 83 bytes 100.0% 🚀
_app/*.B8vRUfcN.js (Deleted) -16.52kB 0 bytes -100.0% 🗑️
_app/*.CTSSIpfG.js (Deleted) -6.5kB 0 bytes -100.0% 🗑️
_app/*.Bpf_IRTo.js (Deleted) -6.5kB 0 bytes -100.0% 🗑️
_app/*.gKzth7jk.js (Deleted) -534 bytes 0 bytes -100.0% 🗑️
_app/*.tvHUCPEW.js (Deleted) -83 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/example-next-app-client-array-push

Assets Changed:

Asset Name Size Change Total Size Change (%)
static/vz11JYR2sSMT8QF2O-*.js (New) 77 bytes 77 bytes 100.0% 🚀
static/vz11JYR2sSMT8QF2O-*.js (New) 543 bytes 543 bytes 100.0% 🚀
static/Ev3HfuWpr7VILatHuGHHT/_buildManifest.js (Deleted) -543 bytes 0 bytes -100.0% 🗑️
static/Ev3HfuWpr7VILatHuGHHT/_ssgManifest.js (Deleted) -77 bytes 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/bundle-analyzer-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.ts (New) 2.77kB 2.77kB 100.0% 🚀
cli.d.ts (New) 342 bytes 342 bytes 100.0% 🚀
index.mjs (Deleted) -3.92kB 0 bytes -100.0% 🗑️
cli.mjs (Deleted) -2.98kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/bundler-plugin-core-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.ts (New) 14.67kB 14.67kB 100.0% 🚀
index.mjs (Deleted) -1.55MB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/nextjs-webpack-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.mjs (New) 4.86kB 4.86kB 100.0% 🚀
index.d.ts (Deleted) -1.11kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/rollup-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.cts (New) 1.3kB 1.3kB 100.0% 🚀
index.mjs (Deleted) -6.41kB 0 bytes -100.0% 🗑️
view changes for bundle: @codecov/webpack-plugin-esm

Assets Changed:

Asset Name Size Change Total Size Change (%)
index.d.cts (New) 3.45kB 3.45kB 100.0% 🚀
index.mjs (Deleted) -8.89kB 0 bytes -100.0% 🗑️

@thomasrockhu-codecov
thomasrockhu-codecov merged commit 5446fda into main Aug 12, 2026
76 of 82 checks passed
@thomasrockhu-codecov
thomasrockhu-codecov deleted the th/js-yaml-3.15.1 branch August 12, 2026 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants