Commit fdff1d8
authored
chore(deps): bump js-yaml to ^3.15.1 / ^4.3.1 (#6578)
resolveYamlOmap() deduplicated !!omap keys with a linear indexOf scan inside
the per-element loop, so parsing an n-entry ordered map is O(n^2). !!omap is
part of the default schema, so a plain yaml.load() is affected. 5.x fixed this
in 5.2.1; the backport to the 3.x and 4.x lines only landed now.
Both lines are bumped in one go: the global js-yaml resolution covers the 4.x
consumers and the three scoped entries keep the 3.x consumers on 3.x.
Covers Dependabot alerts 620 and 621:
https://github.com/getsentry/sentry-react-native/security/dependabot/6211 parent c974c52 commit fdff1d8
2 files changed
Lines changed: 12 additions & 12 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
63 | 63 | | |
64 | 64 | | |
65 | 65 | | |
66 | | - | |
67 | | - | |
68 | | - | |
69 | | - | |
| 66 | + | |
| 67 | + | |
| 68 | + | |
| 69 | + | |
70 | 70 | | |
71 | 71 | | |
72 | 72 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
20970 | 20970 | | |
20971 | 20971 | | |
20972 | 20972 | | |
20973 | | - | |
20974 | | - | |
20975 | | - | |
| 20973 | + | |
| 20974 | + | |
| 20975 | + | |
20976 | 20976 | | |
20977 | 20977 | | |
20978 | 20978 | | |
20979 | 20979 | | |
20980 | 20980 | | |
20981 | | - | |
| 20981 | + | |
20982 | 20982 | | |
20983 | 20983 | | |
20984 | 20984 | | |
20985 | | - | |
20986 | | - | |
20987 | | - | |
| 20985 | + | |
| 20986 | + | |
| 20987 | + | |
20988 | 20988 | | |
20989 | 20989 | | |
20990 | 20990 | | |
20991 | 20991 | | |
20992 | | - | |
| 20992 | + | |
20993 | 20993 | | |
20994 | 20994 | | |
20995 | 20995 | | |
| |||
0 commit comments