Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 5, 2025

This PR contains the following updates:

Package Change Age Confidence
eslint-plugin-yml (source) 1.6.0 -> 1.19.0 age confidence

Release Notes

ota-meshi/eslint-plugin-yml (eslint-plugin-yml)

v1.19.0

Compare Source

Minor Changes
  • #​482 2dd3bca Thanks @​ota-meshi! - feat(sort-keys): improve to calculate the minimum edit distance for sorting and report the optimal sorting direction

  • #​482 2dd3bca Thanks @​ota-meshi! - feat(sort-sequence-values): improve to calculate the minimum edit distance for sorting and report the optimal sorting direction

v1.18.0

Compare Source

Minor Changes

v1.17.0

Compare Source

Minor Changes

v1.16.0

Compare Source

Minor Changes

v1.15.0

Compare Source

Minor Changes

v1.14.0

Compare Source

Minor Changes

v1.13.2

Compare Source

Patch Changes

v1.13.1

Compare Source

Patch Changes

v1.13.0

Compare Source

Minor Changes

v1.12.2

Compare Source

Patch Changes

v1.12.1

Compare Source

Patch Changes

v1.12.0

Compare Source

Minor Changes

v1.11.0

Compare Source

Minor Changes

v1.10.0

Compare Source

Minor Changes

v1.9.0

Compare Source

Minor Changes

v1.8.0

Compare Source

Minor Changes

v1.7.0

Compare Source

Minor Changes

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security
Copy link

socket-security bot commented Dec 5, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedeslint-plugin-yml@​1.6.0 ⏵ 1.19.09910010084 -1100

View full report

@socket-security
Copy link

socket-security bot commented Dec 5, 2025

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm safer-buffer is 94.0% likely obfuscated

Confidence: 0.94

Location: Package overview

From: ?npm/[email protected]

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at [email protected].

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/[email protected]. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate bot force-pushed the renovate/eslint-plugin-yml-1.x branch from c4a5286 to 16b8fa5 Compare December 5, 2025 19:21
@renovate renovate bot force-pushed the renovate/eslint-plugin-yml-1.x branch from 16b8fa5 to ef1f595 Compare December 5, 2025 19:30
@renovate renovate bot force-pushed the renovate/eslint-plugin-yml-1.x branch from ef1f595 to b76e3b5 Compare December 5, 2025 19:57
@renovate renovate bot added devDependencies Dependencies only required for local dev or the prod build, NOT prod runtime linting For checking code for errors in static analysis labels Dec 5, 2025
@leotm leotm merged commit fd1b890 into master Dec 6, 2025
8 checks passed
@leotm leotm deleted the renovate/eslint-plugin-yml-1.x branch December 6, 2025 15:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

devDependencies Dependencies only required for local dev or the prod build, NOT prod runtime linting For checking code for errors in static analysis

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants