🏆 ยอดนิยม: docker/build push action/pull/

dependabot · 2026-06-28T18:20:05Z

Bumps js-yaml from 4.1.1 to 4.3.0.

Changelog

4.3.0, 3.15.0 - 2026-06-27

Security

Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.

Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

[breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

Added named exports for schemas, tags, parser events and AST utilities.

Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.

Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.

Added dump() transform option for changing the generated AST before rendering.

Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.

Added formal data layers (events and AST) for modular data pipelines.

Added low-level parser (to events), presenter and visitor APIs.

Added the YAML Test Suite to the test set.

Changed

See the migration guide for upgrade notes.

Rewritten in TypeScript and reorganized the public API around flat named exports.

... (truncated)

Commits

33d05b5 4.3.0 released
663bfab Drop demo publish, to not override new v5 one.
1cb8c7b Add v4-legacy tag for publish
02f27af Restore umd builds back to es5
8be84ed Fix es5 compatibility
59423c6 Replace maxMergeSeqLength option with maxTotalMergeKeys (more robust). Ba...
6842ef6 doc polish
590dbab 4.2.0 released
f944dc5 Add package.json funding field
f692719 Changelog update
Additional commits viewable in compare view

dependabot · 2026-07-01T12:01:24Z

A newer version of js-yaml exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

crazy-max · 2026-07-01T13:49:46Z

@dependabot recreate

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.1...4.3.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/build-push-action](https://github.com/docker/build-push-action) | action | minor | `v7.2.0` → `v7.3.0` | --- ### Release Notes <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v7.3.0`](https://github.com/docker/build-push-action/releases/tag/v7.3.0) [Compare Source](docker/build-push-action@v7.2.0...v7.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568) - Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566) - Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547) - Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564) - Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563) **Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://codeberg.org/umati/Sample-Server/pulls/1725

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/build-push-action](https://github.com/docker/build-push-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>docker/build-push-action (docker/build-push-action)</summary> ### [`v7.3.0`](https://github.com/docker/build-push-action/releases/tag/v7.3.0) [Compare Source](docker/build-push-action@v7.2.0...v7.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568) - Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566) - Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547) - Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564) - Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563) **Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0> ### [`v7.2.0`](https://github.com/docker/build-push-action/releases/tag/v7.2.0) [Compare Source](docker/build-push-action@v7.1.0...v7.2.0) - Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#1525](docker/build-push-action#1525) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0 in [#1517](docker/build-push-action#1517) - Bump brace-expansion from 2.0.2 to 5.0.6 in [#1534](docker/build-push-action#1534) - Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#1529](docker/build-push-action#1529) - Bump fast-xml-parser from 5.5.7 to 5.8.0 in [#1521](docker/build-push-action#1521) - Bump postcss from 8.5.6 to 8.5.10 in [#1526](docker/build-push-action#1526) - Bump tar from 6.2.1 to 7.5.15 in [#1533](docker/build-push-action#1533) **Full Changelog**: <docker/build-push-action@v7.1.0...v7.2.0> ### [`v7.1.0`](https://github.com/docker/build-push-action/releases/tag/v7.1.0) [Compare Source](docker/build-push-action@v7...v7.1.0) - Git context [query format](https://docs.docker.com/build/concepts/context/#url-queries) support by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.87.0 by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump brace-expansion from 1.1.12 to 1.1.13 in [#1500](docker/build-push-action#1500) - Bump fast-xml-parser from 5.4.2 to 5.5.7 in [#1489](docker/build-push-action#1489) - Bump flatted from 3.3.3 to 3.4.2 in [#1491](docker/build-push-action#1491) - Bump glob from 10.3.12 to 10.5.0 in [#1490](docker/build-push-action#1490) - Bump handlebars from 4.7.8 to 4.7.9 in [#1497](docker/build-push-action#1497) - Bump lodash from 4.17.23 to 4.18.1 in [#1510](docker/build-push-action#1510) - Bump picomatch from 4.0.3 to 4.0.4 in [#1496](docker/build-push-action#1496) - Bump undici from 6.23.0 to 6.24.1 in [#1486](docker/build-push-action#1486) - Bump vite from 7.3.1 to 7.3.2 in [#1509](docker/build-push-action#1509) **Full Changelog**: <docker/build-push-action@v7.0.0...v7.1.0> ### [`v7.0.0`](https://github.com/docker/build-push-action/releases/tag/v7.0.0) [Compare Source](docker/build-push-action@v7...v7) - Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#1470](docker/build-push-action#1470) - Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by [@crazy-max](https://github.com/crazy-max) in [#1473](docker/build-push-action#1473) - Remove legacy export-build tool support for build summary by [@crazy-max](https://github.com/crazy-max) in [#1474](docker/build-push-action#1474) - Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#1466](docker/build-push-action#1466) - Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#1454](docker/build-push-action#1454) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.79.0 in [#1453](docker/build-push-action#1453) [#1472](docker/build-push-action#1472) [#1479](docker/build-push-action#1479) - Bump minimatch from 3.1.2 to 3.1.5 in [#1463](docker/build-push-action#1463) **Full Changelog**: <docker/build-push-action@v6.19.2...v7.0.0> ### [`v7`](docker/build-push-action@v6.19.2...v7) [Compare Source](docker/build-push-action@v6.19.2...v7) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). Reviewed-on: https://git.tainton.uk/repos/labmcp/pulls/8 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>

…n to v7 (#6) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/docker/build-push-action](https://github.com/docker/build-push-action) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>docker/build-push-action (https://github.com/docker/build-push-action)</summary> ### [`v7.4.0`](https://github.com/docker/build-push-action/releases/tag/v7.4.0) [Compare Source](docker/build-push-action@v7.3.0...v7.4.0) - Use the shared error helper for Buildx commands by [@crazy-max](https://github.com/crazy-max) in [#1620](docker/build-push-action#1620) - Prevent workflow command injection in metadata logs by [@crazy-max](https://github.com/crazy-max) in [#1617](docker/build-push-action#1617) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.100.0 in [#1614](docker/build-push-action#1614) [#1618](docker/build-push-action#1618) [#1621](docker/build-push-action#1621) - Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#1609](docker/build-push-action#1609) - Bump brace-expansion from 1.1.13 to 1.1.18 in [#1592](docker/build-push-action#1592) - Bump csv-parse from 7.0.0 to 7.0.2 in [#1613](docker/build-push-action#1613) - Bump js-yaml from 4.3.0 to 4.3.2 in [#1605](docker/build-push-action#1605) [#1615](docker/build-push-action#1615) - Bump nanoid from 3.3.16 to 3.3.18 in [#1611](docker/build-push-action#1611) - Bump postcss from 8.5.10 to 8.5.25 in [#1590](docker/build-push-action#1590) - Bump postcss-selector-parser from 7.1.1 to 7.1.5 in [#1606](docker/build-push-action#1606) - Bump sigstore from 4.1.0 to 4.1.1 in [#1577](docker/build-push-action#1577) - Bump undici from 6.27.0 to 6.28.0 in [#1594](docker/build-push-action#1594) **Full Changelog**: <docker/build-push-action@v7.3.0...v7.4.0> ### [`v7.3.0`](https://github.com/docker/build-push-action/releases/tag/v7.3.0) [Compare Source](docker/build-push-action@v7.2.0...v7.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1567](docker/build-push-action#1567) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1545](docker/build-push-action#1545) [#1572](docker/build-push-action#1572) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1568](docker/build-push-action#1568) - Bump js-yaml from 4.1.1 to 4.3.0 in [#1566](docker/build-push-action#1566) - Bump tmp from 0.2.5 to 0.2.7 in [#1547](docker/build-push-action#1547) - Bump undici from 6.24.1 to 6.27.0 in [#1564](docker/build-push-action#1564) - Bump vite from 7.3.2 to 7.3.6 in [#1563](docker/build-push-action#1563) **Full Changelog**: <docker/build-push-action@v7.2.0...v7.3.0> ### [`v7.2.0`](https://github.com/docker/build-push-action/releases/tag/v7.2.0) [Compare Source](docker/build-push-action@v7.1.0...v7.2.0) - Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#1525](docker/build-push-action#1525) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.87.0 to 0.90.0 in [#1517](docker/build-push-action#1517) - Bump brace-expansion from 2.0.2 to 5.0.6 in [#1534](docker/build-push-action#1534) - Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#1529](docker/build-push-action#1529) - Bump fast-xml-parser from 5.5.7 to 5.8.0 in [#1521](docker/build-push-action#1521) - Bump postcss from 8.5.6 to 8.5.10 in [#1526](docker/build-push-action#1526) - Bump tar from 6.2.1 to 7.5.15 in [#1533](docker/build-push-action#1533) **Full Changelog**: <docker/build-push-action@v7.1.0...v7.2.0> ### [`v7.1.0`](https://github.com/docker/build-push-action/releases/tag/v7.1.0) [Compare Source](docker/build-push-action@v7.0.0...v7.1.0) - Git context [query format](https://docs.docker.com/build/concepts/context/#url-queries) support by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.87.0 by [@crazy-max](https://github.com/crazy-max) in [#1505](docker/build-push-action#1505) - Bump brace-expansion from 1.1.12 to 1.1.13 in [#1500](docker/build-push-action#1500) - Bump fast-xml-parser from 5.4.2 to 5.5.7 in [#1489](docker/build-push-action#1489) - Bump flatted from 3.3.3 to 3.4.2 in [#1491](docker/build-push-action#1491) - Bump glob from 10.3.12 to 10.5.0 in [#1490](docker/build-push-action#1490) - Bump handlebars from 4.7.8 to 4.7.9 in [#1497](docker/build-push-action#1497) - Bump lodash from 4.17.23 to 4.18.1 in [#1510](docker/build-push-action#1510) - Bump picomatch from 4.0.3 to 4.0.4 in [#1496](docker/build-push-action#1496) - Bump undici from 6.23.0 to 6.24.1 in [#1486](docker/build-push-action#1486) - Bump vite from 7.3.1 to 7.3.2 in [#1509](docker/build-push-action#1509) **Full Changelog**: <docker/build-push-action@v7.0.0...v7.1.0> ### [`v7.0.0`](https://github.com/docker/build-push-action/releases/tag/v7.0.0) [Compare Source](docker/build-push-action@v6.19.2...v7.0.0) - Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#1470](docker/build-push-action#1470) - Remove deprecated `DOCKER_BUILD_NO_SUMMARY` and `DOCKER_BUILD_EXPORT_RETENTION_DAYS` envs by [@crazy-max](https://github.com/crazy-max) in [#1473](docker/build-push-action#1473) - Remove legacy export-build tool support for build summary by [@crazy-max](https://github.com/crazy-max) in [#1474](docker/build-push-action#1474) - Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#1466](docker/build-push-action#1466) - Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#1454](docker/build-push-action#1454) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.62.1 to 0.79.0 in [#1453](docker/build-push-action#1453) [#1472](docker/build-push-action#1472) [#1479](docker/build-push-action#1479) - Bump minimatch from 3.1.2 to 3.1.5 in [#1463](docker/build-push-action#1463) **Full Changelog**: <docker/build-push-action@v6.19.2...v7.0.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Rome) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.homelab.devncode.it/marco/vinted-search-mcp/pulls/6

@crazy-max

@crazy-max

dependabot Bot added bot dependencies labels Jun 28, 2026

dependabot Bot changed the title ~~chore(deps): Bump js-yaml from 4.1.1 to 4.2.0~~ chore(deps): Bump js-yaml from 4.1.1 to 4.3.0 Jul 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.2.0 branch from d52b15b to 9d42ad5 Compare July 1, 2026 13:51

dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-4.2.0 branch from ed8c5f9 to a82c504 Compare July 1, 2026 13:57

[dependabot skip] chore: update generated content

9c69730

crazy-max approved these changes Jul 1, 2026

View reviewed changes

crazy-max merged commit 24f845d into master Jul 1, 2026
72 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/js-yaml-4.2.0 branch July 1, 2026 14:02

Navigation Menu

Repository navigation

chore(deps): Bump js-yaml from 4.1.1 to 4.3.0 - #1566

chore(deps): Bump js-yaml from 4.1.1 to 4.3.0#1566
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/js-yaml-4.2.0

dependabot Bot commented on behalf of github Jun 28, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

crazy-max commented Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.3.0, 3.15.0 - 2026-06-27

Security

[5.2.0] - 2026-06-26

Added

Removed

Fixed

[5.1.0] - 2026-06-23

Added

Changed

[5.0.0] - 2026-06-20

Added

Changed

Uh oh!

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

crazy-max commented Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 28, 2026 •

edited

Loading