Skip to content

build(deps): bump js-yaml, nx, @nrwl/jest, @nrwl/js, @nrwl/linter and @nrwl/workspace - #4

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/multi-a7c2160efe
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/multi-a7c2160efe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 18, 2025

Copy link
Copy Markdown

Bumps js-yaml to 4.1.1 and updates ancestor dependencies js-yaml, nx, @nrwl/jest, @nrwl/js, @nrwl/linter and @nrwl/workspace. These dependencies need to be updated together.

Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates js-yaml from 3.14.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates nx from 15.9.2 to 22.0.4

Release notes

Sourced from nx's releases.

22.0.4 (2025-11-17)

🚀 Features

  • core: pull nx init from latest before executing (#33446)
  • docker: add skipDefaultTag option to build target (#33477, #33506)
  • maven: add option to prefix all maven targets (#33420)

🩹 Fixes

  • core: resolve lockfile cache regression with keyMap state (#33448, #33256)
  • core: optimize batch task scheduling to prevent redundant traversals (#33455, #33366)
  • core: capture stderr in nx add command for better error messages (#33462)
  • core: include require paths when resolving specified plugins (#33495)
  • core: prevent hanging between command end and process exit (#33500)
  • gradle: bump gradle migration version (#33479)
  • graph: add nx:build-native dependency to typecheck target (#33428)
  • js: improve typescript plugin performance (#33425, #33076)
  • maven: skip maven plugin computation on vercel/netlify (#33486)
  • misc: handle ERR_USE_AFTER_CLOSE gracefully in nx init and create-nx-workspace (#33469)
  • release: changelog renderer should render commit title with breaking changes (#33439)

❤️ Thank You

22.0.3 (2025-11-10)

🚀 Features

  • core: batch hash tasks without custom hashers (#33327)
  • core: add OSC 9;4 progress indicator support to TUI (#33325)
  • core: disable interactivity by default for run-one task outputs in tui (#33358)
  • gradle: use gitignore to determine dependant task output files (#33402)
  • maven: upgrade to version 0.0.8 with automated migration (#33315)
  • maven: add ci-workflow generator (#33346)
  • maven: bump version from 0.0.8 to 0.0.9 (#33405)
  • misc: remove CI investigation recommendations from agent rules (#33309)
  • vite: add vitest 4 to peerDep range to prevent conflicts (#33394)

🩹 Fixes

... (truncated)

Commits
  • 8a0715b fix(core): prevent hanging between command end and process exit (#33500)
  • ea560ba fix(core): include require paths when resolving specified plugins (#33495)
  • b5126d5 fix(misc): handle ERR_USE_AFTER_CLOSE gracefully in nx init and create-nx-wor...
  • 24baf1c fix(core): capture stderr in nx add command for better error messages (#33462)
  • 9eca9d4 fix(core): optimize batch task scheduling to prevent redundant traversals (#3...
  • 3769d2e feat(core): pull nx init from latest before executing (#33446)
  • ea9785e chore(repo): bump to Node 24 (#33441)
  • c01a64a fix(core): resolve lockfile cache regression with keyMap state (#33448)
  • 872801f fix(release): changelog renderer should render commit title with breaking cha...
  • 2d53ffd fix(core): correctly identify local workspace dependencies on windows (#33408)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for nx since your current version.


Updates @nrwl/jest from 15.9.2 to 19.8.4

Commits

Updates @nrwl/js from 15.9.2 to 19.8.4

Commits

Updates @nrwl/linter from 15.9.2 to 19.8.4

Commits

Updates @nrwl/workspace from 15.9.2 to 19.8.4

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

… @nrwl/workspace

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.1.1 and updates ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml), [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx), [@nrwl/jest](https://github.com/nrwl/nx/tree/HEAD/packages-legacy/jest), [@nrwl/js](https://github.com/nrwl/nx/tree/HEAD/packages-legacy/js), [@nrwl/linter](https://github.com/nrwl/nx/tree/HEAD/packages-legacy/linter) and [@nrwl/workspace](https://github.com/nrwl/nx/tree/HEAD/packages-legacy/workspace). These dependencies need to be updated together.


Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `nx` from 15.9.2 to 22.0.4
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.0.4/packages/nx)

Updates `@nrwl/jest` from 15.9.2 to 19.8.4
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/19.8.4/packages-legacy/jest)

Updates `@nrwl/js` from 15.9.2 to 19.8.4
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/19.8.4/packages-legacy/js)

Updates `@nrwl/linter` from 15.9.2 to 19.8.4
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/19.8.4/packages-legacy/linter)

Updates `@nrwl/workspace` from 15.9.2 to 19.8.4
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/19.8.4/packages-legacy/workspace)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
- dependency-name: nx
  dependency-version: 22.0.4
  dependency-type: direct:development
- dependency-name: "@nrwl/jest"
  dependency-version: 19.8.4
  dependency-type: direct:development
- dependency-name: "@nrwl/js"
  dependency-version: 19.8.4
  dependency-type: direct:development
- dependency-name: "@nrwl/linter"
  dependency-version: 19.8.4
  dependency-type: direct:development
- dependency-name: "@nrwl/workspace"
  dependency-version: 19.8.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants