From a094b769422ef631b6b9481d8c556e37f3b94259 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 16 Sep 2026 10:46:42 +0000
Subject: [PATCH] chore(deps): update dependency js-yaml@4 to v5 [security]

---
 pnpm-lock.yaml      | 12 ++++++------
 pnpm-workspace.yaml |  4 +++-
 2 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1be8ed5d1..e7ea33a69 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -20,7 +20,7 @@ overrides:
   brace-expansion@2: ^2.1.2
   brace-expansion@5: ^5.0.7
   js-yaml@3: ^3.15.1
-  js-yaml@4: ^4.3.1
+  js-yaml@4: ^5.4.2
 
 importers:
 
@@ -4154,8 +4154,8 @@ packages:
     resolution: {integrity: sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==}
     hasBin: true
 
-  js-yaml@4.3.1:
-    resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
+  js-yaml@5.4.2:
+    resolution: {integrity: sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==}
     hasBin: true
 
   jsdom@24.1.3:
@@ -6253,7 +6253,7 @@ snapshots:
   '@changesets/parse@0.4.3':
     dependencies:
       '@changesets/types': 6.1.0
-      js-yaml: 4.3.1
+      js-yaml: 5.4.2
 
   '@changesets/pre@2.0.2':
     dependencies:
@@ -8183,7 +8183,7 @@ snapshots:
     dependencies:
       env-paths: 2.2.1
       import-fresh: 3.3.1
-      js-yaml: 4.3.1
+      js-yaml: 5.4.2
       parse-json: 5.2.0
     optionalDependencies:
       typescript: 5.9.2
@@ -9151,7 +9151,7 @@ snapshots:
       argparse: 1.0.10
       esprima: 4.0.1
 
-  js-yaml@4.3.1:
+  js-yaml@5.4.2:
     dependencies:
       argparse: 2.0.1
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 732c9f7c8..9904d6b42 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -30,7 +30,7 @@ overrides:
   brace-expansion@2: "^2.1.2"
   brace-expansion@5: "^5.0.7"
   js-yaml@3: "^3.15.1"
-  js-yaml@4: "^4.3.1"
+  js-yaml@4: "^5.4.2"
 
 peerDependencyRules:
   allowedVersions:
@@ -42,3 +42,5 @@ strictPeerDependencies: true
 minimumReleaseAgeExclude:
   # Renovate security update: axios@1.15.2
   - axios@1.15.2
+  # Renovate security update: js-yaml@5.4.2
+  - js-yaml@5.4.2