From 66988373cf2362095fb7912e1b78df45a04883e9 Mon Sep 17 00:00:00 2001 From: Marcus Eagan Date: Fri, 4 Sep 2026 20:41:25 -0700 Subject: [PATCH] Update js-yaml to 4.3.2 [SECURITY] Fixes GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj and GHSA-h67p-54hq-rp68 (quadratic CPU consumption in merge-key and !!omap handling) in the js-yaml copy that fumadocs pulls into the docs app. Lockfile-only change. Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01RW4DfubnMqK4UXHmG1J4vE --- web/bun.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/bun.lock b/web/bun.lock index 43ed91d92..9f88d1e55 100644 --- a/web/bun.lock +++ b/web/bun.lock @@ -742,7 +742,7 @@ "jiti": ["jiti@2.7.0", "", { "bin": { "jiti": "lib/jiti-cli.mjs" } }, "sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ=="], - "js-yaml": ["js-yaml@4.1.1", "", { "dependencies": { "argparse": "^2.0.1" }, "bin": { "js-yaml": "bin/js-yaml.js" } }, "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA=="], + "js-yaml": ["js-yaml@4.3.2", "", { "dependencies": { "argparse": "^2.0.1" }, "bin": { "js-yaml": "bin/js-yaml.js" } }, "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA=="], "katex": ["katex@0.16.47", "", { "dependencies": { "commander": "^8.3.0" }, "bin": { "katex": "cli.js" } }, "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg=="],