From 8a556b3dc36257b1fead977db283243660d89dcc Mon Sep 17 00:00:00 2001
From: kurok <22548029+kurok@users.noreply.github.com>
Date: Wed, 19 Aug 2026 10:57:32 +0100
Subject: [PATCH] fix(deps): bump js-yaml to 4.3.1 to fix GHSA-5p4m-2wfm-xmqj

Resolves Dependabot alert #61: quadratic CPU consumption in js-yaml
!!omap resolution (high severity). Transitive dev dependency, updated
within existing semver ranges via lockfile-only change.

Signed-off-by: kurok <22548029+kurok@users.noreply.github.com>
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index fad74a3..c89c71c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1612,9 +1612,9 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
-      "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "dev": true,
       "funding": [
         {