Skip to content

馃摝 Bump js-yaml from 3.14.2 to 3.15.1 in /tools/hermes-parser/js - #358

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tools/hermes-parser/js/js-yaml-3.15.1
Open

馃摝 Bump js-yaml from 3.14.2 to 3.15.1 in /tools/hermes-parser/js#358
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tools/hermes-parser/js/js-yaml-3.15.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown

Bumps js-yaml from 3.14.2 to 3.15.1.

Changelog

Sourced from js-yaml's changelog.

3.15.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.

3.15.0 - 2026-06-27

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one safeLoad() / safeLoadAll() call.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.
###### Microsoft Reviewers: [Open in CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com//pull/358)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.2 to 3.15.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.1/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.2...3.15.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.15.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 11, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 11, 2026 02:36
Copilot AI lite review requested due to automatic review settings August 11, 2026 02:36

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


馃挕 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@github-actions

Copy link
Copy Markdown

Benchmark Results

Total benchmarks: 204

Inputs: baseline/baseline.json, bench_result.json

v8 (6176ms, 5089ms) -17.6%
v8 hermes (CI) hermes (CI)
v8-crypto 622.6ms 479.4ms
v8-deltablue 739.4ms 609ms
v8-raytrace 127.8ms 93.2ms
v8-regexp 593ms 477.2ms
v8-richards 937ms 723.6ms
v8-splay 225.2ms 186.6ms
v8-crypto (static) 452ms 356.8ms
v8-deltablue (static) 661.6ms 535.6ms
v8-raytrace (static) 91.8ms 78.6ms
v8-regexp (static) 749.2ms 679.2ms
v8-richards (static) 781.4ms 665.4ms
v8-splay (static) 195ms 204ms
test-suites (317886ms, 253160ms) -20.4%
test-suites hermes (CI) hermes (CI)
box2d 2949.8ms 1919ms
earley-boyer 2564.8ms 1991.4ms
navier-stokes 5743.8ms 3527.6ms
pdfjs 1038.2ms 752ms
gbemu 2296ms 1721.2ms
code-load 4472.8ms 3676.2ms
typescript 3381.8ms 2407ms
simpleSum 8855.4ms 5083.8ms
propAccess 2691.2ms 1709.8ms
allocObj 252ms 171.4ms
allocObjLit 6371.8ms 5311ms
allocNewObj 20053ms 15689.2ms
allocArray 249ms 171.4ms
allocNewArray 34956.8ms 28007.2ms
arrayRead 115.6ms 82ms
arrayReadByIndex 550ms 379.2ms
largeArrayRead 827.2ms 409.6ms
arrayWrite 261.8ms 201.6ms
largeArrayWrite 2218ms 1635.6ms
interp-dispatch 2880ms 1723.2ms
wb-perf 8327ms 7036ms
arrayReverse 40.6ms 32.6ms
arrayMap 1472.6ms 1470.2ms
arrayIndexOf 143.2ms 110.2ms
arrayLastIndexOf 148.6ms 114.6ms
arrayEvery 2308.8ms 2246.8ms
arraySome 2174.4ms 2260ms
arrayFill 2401.2ms 1934.4ms
arrayFilter 1866.4ms 1670.8ms
arrayFind 3207ms 2785.8ms
arrayFindIndex 3322ms 2758.2ms
arrayPop 1031.4ms 829.2ms
arrayReduce 1994.2ms 2022.2ms
arrayReduceRight 2075.8ms 2033.2ms
arrayShift 2065.8ms 1861.6ms
arrayUnshift 2109.4ms 1915.6ms
arrayIncludes 1216.6ms 906.8ms
arrayFrom 1102.8ms 867.4ms
arrayCopyWithin 1487ms 1245ms
stringFromCharCode 92.6ms 73.6ms
arraySlice 786.2ms 653.4ms
arraySplice 26.8ms 23.2ms
arrayOf 1048.8ms 777ms
stringCharAt 1346.6ms 1008.2ms
stringMatch 3192.4ms 2242.2ms
stringSearch 3508.2ms 2249.8ms
stringStartsWith 701ms 467.6ms
stringEndsWith 650.4ms 419ms
stringIncludes 1520.6ms 1461.2ms
stringIndexOf 1555.6ms 1805.8ms
stringLastIndexOf 1821.4ms 1382.8ms
stringSplit 822ms 613.2ms
stringSlice 490ms 395ms
stringPadStart 2910.8ms 2336.6ms
stringPadEnd 2910ms 2336ms
regExpMatch 1506.2ms 1190ms
regExpSearch 1227ms 1139.4ms
regExpToString 1204ms 874.4ms
stringReplace 1394.8ms 1447.8ms
regExpReplace 3309.2ms 706ms
regExpFlags 956.8ms 775.2ms
regExpSplit 1307.8ms 994.4ms
numberArrayReadWrite 2477.8ms 1917.2ms
protoCache 3594.6ms 1840.4ms
box2d (static) 1792.6ms 1422.6ms
earley-boyer (static) 1875.6ms 1520ms
navier-stokes (static) 3410.2ms 2858.4ms
pdfjs (static) 812.8ms 622.8ms
gbemu (static) 1797ms 1332ms
code-load (static) 4199.2ms 3361.2ms
typescript (static) 2685.6ms 2040.4ms
simpleSum (static) 936.2ms 851.4ms
propAccess (static) 2298ms 1821.6ms
allocObj (static) 0.2ms 0ms
allocObjLit (static) 4154.4ms 3504ms
allocNewObj (static) 15749.2ms 13810.6ms
allocArray (static) 0.6ms 0.4ms
allocNewArray (static) 28494.2ms 24574ms
arrayRead (static) 74.2ms 56ms
arrayReadByIndex (static) 453.2ms 385.2ms
largeArrayRead (static) 552.2ms 427.2ms
arrayWrite (static) 178.4ms 141.4ms
largeArrayWrite (static) 1568.6ms 1282.2ms
interp-dispatch (static) 1918.8ms 1585ms
wb-perf (static) 8991.2ms 7239.4ms
arrayReverse (static) 37ms 31.8ms
arrayMap (static) 1064.8ms 832.6ms
arrayIndexOf (static) 128.2ms 97.8ms
arrayLastIndexOf (static) 138.8ms 97.8ms
arrayEvery (static) 1397.6ms 1196.6ms
arraySome (static) 1406.6ms 1197.6ms
arrayFill (static) 1969.2ms 1599.6ms
arrayFilter (static) 1061ms 888.4ms
arrayFind (static) 2242.2ms 1985.4ms
arrayFindIndex (static) 2235.8ms 1970ms
arrayPop (static) 878ms 729.8ms
arrayReduce (static) 1311.8ms 1126ms
arrayReduceRight (static) 1322.6ms 1123ms
arrayShift (static) 1512ms 1219ms
arrayUnshift (static) 1568.2ms 1263.4ms
arrayIncludes (static) 963.4ms 765.4ms
arrayFrom (static) 1030.6ms 758.4ms
arrayCopyWithin (static) 1109.6ms 886.4ms
stringFromCharCode (static) 77ms 60ms
arraySlice (static) 571.6ms 467.4ms
arraySplice (static) 26ms 23.4ms
arrayOf (static) 868.8ms 631.6ms
stringCharAt (static) 1100.6ms 859.8ms
stringMatch (static) 2227.6ms 1772ms
stringSearch (static) 2219.2ms 1774.4ms
stringStartsWith (static) 494.2ms 395.2ms
stringEndsWith (static) 457.8ms 350.4ms
stringIncludes (static) 1437.4ms 1649ms
stringIndexOf (static) 1440.8ms 1778ms
stringLastIndexOf (static) 1956.6ms 1359.6ms
stringSplit (static) 651.2ms 506.6ms
stringSlice (static) 445.6ms 356ms
stringPadStart (static) 2294.4ms 1839.6ms
stringPadEnd (static) 2499.2ms 1837ms
regExpMatch (static) 1483.2ms 1075.2ms
regExpSearch (static) 1296.2ms 1063.2ms
regExpToString (static) 1326.6ms 985.6ms
stringReplace (static) 1455.6ms 1380.2ms
regExpReplace (static) 851.8ms 621.8ms
regExpFlags (static) 870.6ms 654.2ms
regExpSplit (static) 1200ms 837.2ms
numberArrayReadWrite (static) 2132.8ms 1635.2ms
protoCache (static) 3595.8ms 2843ms
micros (60876ms, 49751ms) -18.3%
micros hermes (CI) hermes (CI)
getNodeById.js 5273ms 4456ms
setInsert.js 2864.8ms 2578.2ms
stringify-number.js 1823.4ms 1508.8ms
typed-array-sort.js 22381ms 18161.4ms
getNodeById.js (static) 3941ms 3259.2ms
setInsert.js (static) 2517.6ms 2020ms
stringify-number.js (static) 1663.6ms 1236ms
typed-array-sort.js (static) 20411.4ms 16531.2ms
jit-benches (8563ms, 5398ms) -37.0%
jit-benches hermes (CI) hermes (CI)
idisp.js 2810.2ms 1729.6ms
idispn.js 3395.8ms 1782.6ms
idisp.js (static) 1906ms 1584.4ms
idispn.js (static) 450.8ms 301.6ms
many-subclasses (73437ms, 60784ms) -17.2%
many-subclasses hermes (CI) hermes (CI)
many.js 19104.8ms 14902.4ms
many-sh-1.js 7322.8ms 6321.2ms
many-sh-2.js 7329ms 6347.2ms
many-sh-3.js 7083.6ms 5997ms
many-sh-4.js 7235ms 6012ms
many.js (static) 15996ms 13558.6ms
many-sh-1.js (static) 2285.2ms 1819.6ms
many-sh-2.js (static) 2387ms 1996.6ms
many-sh-3.js (static) 2347.2ms 1908.4ms
many-sh-4.js (static) 2346ms 1921ms
map-objects (3627ms, 2819ms) -22.3%
map-objects hermes (CI) hermes (CI)
map-objects-untyped.js 1023.6ms 790ms
map-objects-typed.js 957.6ms 741.6ms
map-objects-untyped.js (static) 917.2ms 709.4ms
map-objects-typed.js (static) 728.8ms 577.8ms
map-strings (4335ms, 3220ms) -25.7%
map-strings hermes (CI) hermes (CI)
map-strings-untyped.js 1196.8ms 897ms
map-strings-typed.js 1139.2ms 834.6ms
map-strings-untyped.js (static) 1092.2ms 817.6ms
map-strings-typed.js (static) 906.8ms 671ms
nbody (3448ms, 2363ms) -31.5%
nbody hermes (CI) hermes (CI)
original/nbody.js 839.6ms 548ms
fully-typed/nbody.js 710ms 464.2ms
fully-typed/nbody.ts 865.2ms 547.2ms
original/nbody.js (static) 449.2ms 349ms
fully-typed/nbody.js (static) 135ms 103.6ms
fully-typed/nbody.ts (static) 449.2ms 351.2ms
string-switch (6503ms, 4506ms) -30.7%
string-switch (string-switch/plain) hermes (CI) hermes (CI)
bench.js 1316ms 1073ms
bench.js (static) 5187ms 3432.6ms
raytracer (5608ms, 4411ms) -21.3%
raytracer (raytracer/original) hermes (CI) hermes (CI)
bench-raytracer.js 1550.4ms 1214.6ms
raytracer.ts 1667.6ms 1267.2ms
bench-raytracer.js (static) 1198.4ms 957.8ms
raytracer.ts (static) 1191.8ms 971.8ms
MiniReact (30332ms, 24142ms) -20.4%
MiniReact hermes (CI) hermes (CI)
no-objects/out/simple-stripped.js 2239.2ms 1627.8ms
no-objects/out/simple-lowered.js 2270.8ms 1688.8ms
no-objects/out/music-stripped.js 42.6ms 36.2ms
no-objects/out/music-lowered.js 47.2ms 38.2ms
no-deps/stripped/MiniReact.js 5004ms 3939.2ms
no-deps/MiniReact.js 5256.2ms 4376.2ms
no-objects/out/simple.js 2260.4ms 2219.2ms
no-objects/out/music.js 45.6ms 38.4ms
no-objects/out/simple-stripped.js (static) 1725.2ms 1304.4ms
no-objects/out/simple-lowered.js (static) 1725.4ms 1334.8ms
no-objects/out/music-stripped.js (static) 18.8ms 15.6ms
no-objects/out/music-lowered.js (static) 19.4ms 15.6ms
no-deps/stripped/MiniReact.js (static) 4024.8ms 3110.8ms
no-deps/MiniReact.js (static) 3938.2ms 3083.4ms
no-objects/out/simple.js (static) 1695.2ms 1298.2ms
no-objects/out/music.js (static) 19ms 15.6ms
widgets (12934ms, 10784ms) -16.6%
widgets hermes (CI) hermes (CI)
simple-classes/widgets.js 1758.2ms 1504ms
original/es5/widgets.js 2798.8ms 2461ms
single-file/es5/widgets.js 2775.2ms 2427.2ms
simple-classes/widgets.js (static) 1012ms 805.6ms
original/es5/widgets.js (static) 2283.2ms 1789.6ms
single-file/es5/widgets.js (static) 2306.2ms 1797ms

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant