Skip to content

Update js-yaml and markdownlint-cli2 - #4608

Open
cklin wants to merge 2 commits into
mainfrom
cklin/js-yaml
Open

cklin wants to merge 2 commits into
mainfrom
cklin/js-yaml

Conversation

@cklin

@cklin cklin commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

This PR upgrades js-yaml.

  • Upgrade the direct js-yaml dependency from 5.2.3 to 5.4.2 and eligible transitive copies to 3.15.2 and 4.3.2, preserving their existing major versions.
  • Upgrade markdownlint-cli2 from 0.23.2 to 0.23.3, replacing its exact js-yaml 5.2.2 pin with patched 5.4.1 without an override.

cklin and others added 2 commits October 19, 2026 15:02
Upgrade the direct dependency from 5.2.3 to 5.4.2 and refresh eligible
transitive copies to 3.15.2 and 4.3.2. Preserve markdownlint-cli2's
exact 5.2.2 requirement.

Co-authored-by: Copilot <[email protected]>
Copilot-Session: 324aab52-a07d-4fdd-88e5-508d28dbc858
With this upgrade, markdownlint-cli2 now depends on js-yaml 5.4.1 instead of
5.2.2.

Co-authored-by: Copilot <[email protected]>
Copilot-Session: 324aab52-a07d-4fdd-88e5-508d28dbc858
@cklin
cklin marked this pull request as ready for review October 19, 2026 22:06
@cklin
cklin requested a review from a team as a code owner October 19, 2026 22:07
Copilot AI max review requested due to automatic review settings October 19, 2026 22:07

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The manifest and lockfile are consistent, with no blocking issues identified.

No open issues 🎉

1 file not reviewed
  • extensions/ql-vscode/package-lock.json: Generated file
What changed in this PR

Updates YAML dependencies and Markdown linting tooling for the CodeQL VS Code extension.

Changes:

  • Upgrade direct js-yaml to 5.4.2 and markdownlint-cli2 to 0.23.3.
  • Refresh transitive dependencies while preserving existing js-yaml major versions.
File Description
extensions/​ql-vscode/​package.json Updates direct dependency ranges.
extensions/​ql-vscode/​package-lock.json Records patched YAML versions and refreshed linting dependencies.

Review effort: Max

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants