[Snyk] Upgrade yaml from 1.0.1 to 1.10.0

[itai-codefresh]

Snyk has created this PR to upgrade yaml from 1.0.1 to 1.10.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 23 versions ahead of your current version.
• The recommended version was released 8 months ago, on 2020-05-16.

Release notes

Package name: yaml

• 1.10.0 - 2020-05-16
  

  This will probably be the last minor release of yaml@1. I'm aiming to release yaml@2 within a few months; prereleases of that will be published using the next dist-tag on npm. Patch releases for 1.10 may still happen, if necessary.

  New Features

  • Use Rollup for Node.js & browser builds (#165)
    • This removes most of the internal dist/ paths from the release. If you want/need to use a class or function that is no longer public, please file an issue and we can add it to the exports.
    • Drop dependency on @ babel/runtime. After this, the package has 0 runtime dependencies. 🎉
    • Add exports { Alias, Collection, Merge, Node } to 'yaml/types'
  • Document Schema.createPair() & make its ctx arg optional (#157)
  • Always indent top-level scalars with lines starting with document markers or % directives (#162)
  • Use double-space when forcing top-level block scalar indent, for clarity (#162)
  • Add getNodes(): string[] method to Anchors (#166)
  • Refactor Jest config, adding tests for compiled dist/ endpoints
  • Rename & refactor source files. This should have no effect on the results, but lots of stuff moved around

  Improved Errors & Warnings

  • Throw more helpful error when setting Pair.commentBefore incorrectly (#157)
  • Better errors for bad indents (#169)
  • Drop incorrect error for flow mapping keys with length > 1024 chars
  • Add errors for plain scalars that start with reserved indicators
  • Add more explicit errors for block scalar values with bad indents
  • Enable log prints during npm start debugging

  Improved TypeScript declarations

  • Fix/simplify export mapping of 'yaml/types' and 'yaml/util'
  • Fix types, dropping AST.{AstNode,ScalarNode,CollectionNode} (#160)
  • Add missing toString() methods to AST nodes (#159)
  • Add directivesEndMarker to Document type (#167)

  Bugfixes

  • Use CommonJS for top-level default-exporting browser endpoints (#163)
  • docs: Add note about simpleKeys for null values (#170)
  • Update dev & playground dependencies, including eslint 7 & jest 26
  • Update yaml-test-suite, fixing errors in remaining invalid-input tests
    • Add explicit error for block scalars with more-indented leading empty lines (S98Z)
    • Properly add error for tab-indented map values (4EJS)
    • Add error for multiline implicit flow sequence pair key (DK4H & ZXT5)
    • Require space after comma before comment in flow collections (CVW2)
    • Use mapAsMap: true for out.yaml tests (4FJ6)
• 1.9.2 - 2020-04-20
  
  • ts: Fix Node.toJSON() type (#154)
• 1.9.1 - 2020-04-18
  
  • Add onAnchor callback arg to doc.toJSON()
  • Use a Map for anchors in doc.toJSON()
  • Update dependencies
• 1.9.0 - 2020-04-17
  

  New Features

  • Add custom ES module exports for browsers (#145)
  • Drop __esModule markers from CJS transpilation (#145)
  • Support BigInt values (#146)
  • Add YAML.scalarOptions (#146)
  • Add indent option: number of spaces (default: 2) (#147)
  • Add indentSeq option: if false, consider - as indentation (default: true) (#147)
  • Add TypeScript typings, based on @ types/yaml by @ ikatyang, with contributions from @ ColinBradley and @ shirk3y (#153)

  Bugfixes

  • Only use named exports internally (#145)
  • Clean up & document warning silencing, also supporting process.env (Fixes #148)
  • Fix typo in flow collection parsing (Fixes #149)
  • Accept that multiple blank lines generate multiple nodes (Closes #150)
  • Use cross-env to enable building on Windows (#152 by @ shirk3y)
  • Specify Document.cstNode type
  • Add Pair.Type enum
  • Export YAMLError from 'yaml/util'
• 1.8.3 - 2020-03-21
  
  • Add "browser" mappings for types.mjs & util.mjs (#142)
  • Fix parsing of floats like .8 and 00.4 in the core schema (#144)
  • Fix !!binary resolution on IE 11
  • Add Jest workaround to file deprecation tests
• 1.8.2 - 2020-03-11
  
  • Add a "./": "./" export target
  • Add fallback export targets for Node 13.0-13.6
• 1.8.1 - 2020-03-11
  

  1.8.1

• 1.8.0 - 2020-03-07
  

  New Features

  • Add ES module exports + set type in package.json (Fixes #138)
  • Add custom identifiers for core tags
  • Add sortMapEntries option (#44)
  • Use ES modules in browser build (supported by all modern bundlers and other packagers)

  Bugfixes

  • Create missing intermediate collections in addIn & setIn (Fixes #131)
  • Account for initial indentation when stringifying values (Fixes #133)
  • Use a Map for prevObjects in createNode (#137)
  • YAML.createNode sets tag in the result, if explicitly given
  • Drop Node 6 tests due to incompatibility with Jest 25 (transpilation remains as Node 6)
  • cst: Minor refactoring to improve legibility, add some comments
  • cst: Drop Node.atCollectionItem as unused since 93a8a44
  • cst: Drop Directive.endOfDirective as unused since 307df17
  • Clean up YAML 1.1 & JSON boolean tag objects
  • Add tests to improve code coverage
  • Update dependencies
• 1.7.2 - 2019-10-15
  
  • During schema.createNode, accept Nodes as input (#128)
  • Update dependencies
• 1.7.1 - 2019-10-07
  
  • Empty collection items only grab inline comments (#125, #126)
  • Set CST Node#context as non-enumerable, to simplify logging
• 1.7.0 - 2019-09-25
• 1.6.0 - 2019-05-23
• 1.5.1 - 2019-05-05
• 1.5.0 - 2019-04-06
• 1.4.0 - 2019-03-07
• 1.3.2 - 2019-02-08
• 1.3.1 - 2019-01-27
• 1.3.0 - 2019-01-27
• 1.2.1 - 2019-01-17
• 1.2.0 - 2019-01-01
• 1.1.0 - 2018-12-11
• 1.0.3 - 2018-11-28
• 1.0.2 - 2018-11-15
• 1.0.1 - 2018-11-07

from yaml GitHub release notes

Commit messages

Package name: yaml

• 56b873b 1.10.0
• 9f55a0a Fix "files" in package.json
• 0f39d5b docs: Add note about simpleKeys for null values (prepare 5.10.2 release launchdarkly/node-server-sdk#170)
• ffa3384 Update dev dependencies
• 11c2e4f Update docs
• bd01cf4 Add missing toString() methods to AST nodes (prepare 5.9.1 release launchdarkly/node-server-sdk#159)
• 9908e71 Better errors for bad indents (Not able to fetch variation from redis persistent store launchdarkly/node-server-sdk#169)
• 3a9327f Refactor Jest config, adding tests for compiled dist/ endpoints
• 8636090 Add exports { Alias, Collection, Merge, Node } to 'yaml/types'
• dc46925 Drop @ babel/cli as unused
• 11d27db Use Rollup also for Node.js build
• 9396ae9 Add errors for plain scalars that start with reserved indicators
• 3e01ff5 Add more explicit errors for block scalar values with bad indents
• 0591596 Enable log prints during `npm start` debugging
• d66c0f6 Update yaml-test-suite
• 7eafeb8 Add explicit error for block scalars with more-indented leading empty lines (S98Z)
• 8f3f8f1 Properly add error for tab-indented map values (4EJS)
• 665d363 Add error for multiline implicit flow sequence pair key (DK4H & ZXT5)
• 9fe7cd3 Drop incorrect error for flow mapping keys with length > 1024 chars
• 67ed971 Require space after comma before comment in flow collections (CVW2)
• 8dfd0be test-suite: Use mapAsMap: true for out.yaml tests (4FJ6)
• a007299 Update dev & playground dependencies, including eslint 7 & jest 26
• bf0dc20 Merge pull request prepare 5.10.0 release launchdarkly/node-server-sdk#165 from eemeli/rollup
• 3900895 Also indent top-level scalars with lines starting with % directives (Plans to support Semantic Versioning launchdarkly/node-server-sdk#162)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs