Skip to content

Bump js-yaml, @angular/cli and karma-coverage-istanbul-reporter - #85

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/multi-27fe1eefa3
Open

Bump js-yaml, @angular/cli and karma-coverage-istanbul-reporter#85
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/multi-27fe1eefa3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Contributor

Bumps js-yaml to 3.15.1 and updates ancestor dependencies js-yaml, @angular/cli and karma-coverage-istanbul-reporter. These dependencies need to be updated together.

Updates js-yaml from 3.14.1 to 3.15.1

Changelog

Sourced from js-yaml's changelog.

3.15.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.

3.15.0 - 2026-06-27

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one safeLoad() / safeLoadAll() call.

[3.14.2] - 2025-11-15

Security

  • Fix prototype pollution in merge (<<).
Commits

Updates @angular/cli from 1.3.0 to 1.7.4

Commits
  • 0b291ab release: 1.7.4
  • 6afa952 fix(@​angular/cli): Pass logger to allow schematics to log messages
  • 40dfce9 release: 1.7.3
  • f5e5d57 fix(@​ngtools/webpack): prevent relative request path mapping
  • ffcc386 fix(@​ngtools/webpack): ensure webpack errors are actually an Error
  • d5d1d9b fix(@​angular/cli): update clean-css to handle parsing edge cases
  • 6a55af3 fix(@​angular/cli): workaround ES2015 minifier inlining defect
  • fefd6c9 ci: don't install chrome on appveyor
  • ae601a0 release: 1.7.2
  • f1304b3 fix(@​angular/cli): prevent greedy CSS url function capture
  • Additional commits viewable in compare view

Updates karma-coverage-istanbul-reporter from 0.2.3 to 3.0.3

Changelog

Sourced from karma-coverage-istanbul-reporter's changelog.

3.0.3 (2020-05-28)

Bug Fixes

  • duplicated files when "skipFilesWithNoCoverage=false" on windows (052f6ab)

3.0.2 (2020-05-05)

Bug Fixes

  • return correct exit code when thresholds are not met (that works with the karma api) (a0cbdd8), closes #80

3.0.1 (2020-05-04)

Bug Fixes

  • set correct process exit code when thresholds are not met (9ba3fe0), closes #80

3.0.0 (2020-05-01)

⚠ BREAKING CHANGES

  • node 6 and node 8 are no longer supported. To use this package you must upgrade to node 10 or higher.

Features

  • upgrade to latest istanbul api (28cbbfb)

2.1.1 (2019-11-21)

Bug Fixes

2.1.0 (2019-07-24)

Features

  • config: support istanbul-api instrumentation configuration (c4f7a9c), closes #73

... (truncated)

Commits
  • b61dd30 chore(release): 3.0.3
  • 052f6ab fix: duplicated files when "skipFilesWithNoCoverage=false" on windows
  • 5f3f030 docs: update changelog
  • 5f5ca05 chore(release): 3.0.2
  • a0cbdd8 fix: return correct exit code when thresholds are not met
  • e8d4f4a style: fix lint issue
  • 0d37f42 fix: wait for reports to finish writing before exiting karma
  • a50d4e5 chore(release): 3.0.1
  • e756c12 test: fix test exit code
  • 9ba3fe0 fix: set correct process exit code when thresholds are not met
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 3.15.1 and updates ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml), [@angular/cli](https://github.com/angular/angular-cli) and [karma-coverage-istanbul-reporter](https://github.com/mattlewis92/karma-coverage-istanbul-reporter). These dependencies need to be updated together.


Updates `js-yaml` from 3.14.1 to 3.15.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.1/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...3.15.1)

Updates `@angular/cli` from 1.3.0 to 1.7.4
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v1.3.0...v1.7.4)

Updates `karma-coverage-istanbul-reporter` from 0.2.3 to 3.0.3
- [Changelog](https://github.com/mattlewis92/karma-coverage-istanbul-reporter/blob/master/CHANGELOG.md)
- [Commits](mattlewis92/karma-coverage-istanbul-reporter@v0.2.3...v3.0.3)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.1
  dependency-type: indirect
- dependency-name: "@angular/cli"
  dependency-version: 1.7.4
  dependency-type: direct:development
- dependency-name: karma-coverage-istanbul-reporter
  dependency-version: 3.0.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code major The changes in this pull request call for a major version bump labels Aug 8, 2026
@dependabot
dependabot Bot requested a review from dav3r as a code owner August 8, 2026 03:39
@dependabot dependabot Bot added the javascript Pull requests that update JavaScript code label Aug 8, 2026
@dependabot
dependabot Bot requested review from felddy and jsf9k as code owners August 8, 2026 03:39
@dependabot dependabot Bot added the major The changes in this pull request call for a major version bump label Aug 8, 2026
@dependabot
dependabot Bot requested a review from mcdonnnj as a code owner August 8, 2026 03:39
@github-actions github-actions Bot added the version bump This issue or pull request increments the version number label Aug 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript code major The changes in this pull request call for a major version bump version bump This issue or pull request increments the version number

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants