Skip to content

Bump js-yaml, @storybook/vue, bili and css-loader #15

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump js-yaml, @storybook/vue, bili and css-loader #15

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 18, 2025

Bumps js-yaml to 3.14.2 and updates ancestor dependencies js-yaml, @storybook/vue, bili and css-loader. These dependencies need to be updated together.

Updates js-yaml from 3.7.0 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[3.14.2] - 2025-11-15

Security

  • Backported v4.1.1 fix to v3

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.

[4.1.0] - 2021-04-15

Added

  • Types are now exported as yaml.types.XXX.
  • Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

  • Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

[4.0.0] - 2021-01-03

Changed

  • Check migration guide to see details for all breaking changes.
  • Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are moved to js-yaml-js-types package.
  • Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.
  • yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use yaml.DEFAULT_SCHEMA instead.
  • yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.
  • !!binary now always mapped to Uint8Array on load.
  • Reduced nesting of /lib folder.
  • Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal, 0o1234 is octal, 1:23 is parsed as string instead of base60).
  • dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.
  • Line and column in exceptions are now formatted as (X:Y) instead of at line X, column Y (also present in compact format), #332.
  • Code snippet created in exceptions now contains multiple lines with line numbers.
  • dump() now serializes undefined as null in collections and removes keys with undefined in mappings, #571.
  • dump() with skipInvalid=true now serializes invalid items in collections as null.
  • Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.
  • Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.

Added

  • Added .mjs (es modules) support.
  • Added quotingType and forceQuotes options for dumper to configure string literal style, #290, #529.
  • Added styles: { '!!null': 'empty' } option for dumper (serializes { foo: null } as "foo: "), #570.

... (truncated)

Commits

Updates @storybook/vue from 3.4.8 to 7.6.20

Changelog

Sourced from @​storybook/vue's changelog.

7.6.20

7.6.19

7.6.18

7.6.17

7.6.16

  • Addon Themes: Make type generic less strict - #26042, thanks @​yannbf!
  • Interaction: Make sure that adding spies doesn't cause infinite loops with self referencing args #26019, thanks @​kasperpeulen!

7.6.15

This release accidentally didn't contain anything.

7.6.14

7.6.13

7.6.12

  • CLI: Fix upgrade detecting the wrong version of existing Storybooks - #25752, thanks @​JReinhold!

7.6.11

7.6.10

... (truncated)

Commits
  • 1fe1c39 Bump version from 7.6.19 to 7.6.20 [skip ci]
  • 0264a14 Bump version from 7.6.18 to 7.6.19 (manual) [skip ci]
  • 5622242 Bump version from 7.6.17 to 7.6.18 MANUALLY (again)
  • 6e6cbcf temporarily decrease version number for CI
  • 2f3744f Bump version from 7.6.17 to 7.6.18 MANUALLY
  • 60bf2b5 Bump version from "7.6.16" to "7.6.17" [skip ci]
  • 287300b Bump version from "7.6.15" to "7.6.16" [skip ci]
  • 8bcc3b4 Bump version from "7.6.14" to "7.6.15" [skip ci]
  • 8d42c55 Bump version from "7.6.13" to "7.6.14" [skip ci]
  • 95ed703 Bump version from "7.6.12" to "7.6.13" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by valentinpalkovic, a new releaser for @​storybook/vue since your current version.


Updates bili from 3.1.2 to 5.0.5

Release notes

Sourced from bili's releases.

v5.0.5

5.0.5 (2020-06-21)

Bug Fixes

v5.0.4

5.0.4 (2020-06-19)

Bug Fixes

v5.0.3

5.0.3 (2020-06-19)

Bug Fixes

v5.0.2

5.0.2 (2020-06-15)

Bug Fixes

  • rollup: handle warning for deprecated api (e93f812)

v5.0.1

5.0.1 (2020-06-15)

Bug Fixes

  • add cac and joycon to dependencies (696c162)
  • never include pkg.dependencies in bundle (fc69352)

v5.0.0

5.0.0 (2020-06-15)

Features

... (truncated)

Commits
  • fe897b2 fix: ensure filename for esm format (#364)
  • 4aae8f0 fix(docs): configuration link (#356)
  • 9a5e211 fix: duplicated banner after minified (fix #346) (#359)
  • e93f812 fix(rollup): handle warning for deprecated api
  • fc69352 fix: never include pkg.dependencies in bundle
  • 696c162 fix: add cac and joycon to dependencies
  • 023f2c5 feat: Upgrade Rollup and Plugins (#357)
  • a21420c fix(docs): configuration link (#355)
  • 6a58956 feat: babel support new syntax and fine tuning compile (#342)
  • 51cc78b docs: add hint for bug of rollup-plugin-vue (#343)
  • Additional commits viewable in compare view

Updates css-loader from 0.28.11 to 7.1.2

Release notes

Sourced from css-loader's releases.

v7.1.2

7.1.2 (2024-05-22)

Bug Fixes

  • keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

v7.1.1

7.1.1 (2024-04-10)

Bug Fixes

  • automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

v7.1.0

7.1.0 (2024-04-08)

Features

  • added the getJSON option to output CSS modules mapping (#1577) (af834b4)

v7.0.0

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

  • The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:

import style from "./style.css";
console.log(style.myClass);

After:

import * as style from "./style.css";
console.log(style.myClass);

... (truncated)

Changelog

Sourced from css-loader's changelog.

7.1.2 (2024-05-22)

Bug Fixes

  • keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

7.1.1 (2024-04-10)

Bug Fixes

  • automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

7.1.0 (2024-04-08)

Features

  • added the getJSON option to output CSS modules mapping (#1577) (af834b4)

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

  • The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:

import style from "./style.css";
console.log(style.myClass);

After:

import * as style from "./style.css";
console.log(style.myClass);

To restore 6.x behavior, please use:

module.exports = {
</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for css-loader since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump js-yaml, @storybook/vue, bili and css-loader
0b2dd79 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 3.14.2 and updates ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml), [@storybook/vue](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/vue), [bili](https://github.com/egoist/bili) and [css-loader](https://github.com/webpack-contrib/css-loader). These dependencies need to be updated together.


Updates `js-yaml` from 3.7.0 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.7.0...3.14.2)

Updates `@storybook/vue` from 3.4.8 to 7.6.20
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/7.6.20/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/7.6.20/code/renderers/vue)

Updates `bili` from 3.1.2 to 5.0.5
- [Release notes](https://github.com/egoist/bili/releases)
- [Changelog](https://github.com/egoist/bili/blob/master/.releaserc.json)
- [Commits](egoist/bili@v3.1.2...v5.0.5)

Updates `css-loader` from 0.28.11 to 7.1.2
- [Release notes](https://github.com/webpack-contrib/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/css-loader@v0.28.11...v7.1.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
- dependency-name: "@storybook/vue"
  dependency-version: 7.6.20
  dependency-type: direct:development
- dependency-name: bili
  dependency-version: 5.0.5
  dependency-type: direct:development
- dependency-name: css-loader
  dependency-version: 7.1.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 18, 2025
@coderabbitai
Copy link

coderabbitai bot commented Nov 18, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant