From ae95394fdf9a38a19846af66926a1f8288f96f10 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 22 Jul 2026 14:20:36 +0000 Subject: [PATCH 1/2] chore(deps): bump js-yaml from 4.3.0 to 5.2.1 in /tools/catalog-build Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.0 to 5.2.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.3.0...5.2.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.2.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- tools/catalog-build/package-lock.json | 10 +++++----- tools/catalog-build/package.json | 2 +- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/tools/catalog-build/package-lock.json b/tools/catalog-build/package-lock.json index 2b5ffdd..f88685d 100644 --- a/tools/catalog-build/package-lock.json +++ b/tools/catalog-build/package-lock.json @@ -9,7 +9,7 @@ "version": "1.0.0", "devDependencies": { "gray-matter": "^4.0.3", - "js-yaml": "^4.1.0" + "js-yaml": "^5.2.1" } }, "node_modules/argparse": { @@ -97,9 +97,9 @@ } }, "node_modules/js-yaml": { - "version": "4.3.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz", - "integrity": "sha1-0ZAFcqf3zwtfVAyDZz5gutNDZZI=", + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.1.tgz", + "integrity": "sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==", "dev": true, "funding": [ { @@ -116,7 +116,7 @@ "argparse": "^2.0.1" }, "bin": { - "js-yaml": "bin/js-yaml.js" + "js-yaml": "bin/js-yaml.mjs" } }, "node_modules/kind-of": { diff --git a/tools/catalog-build/package.json b/tools/catalog-build/package.json index e321932..295169a 100644 --- a/tools/catalog-build/package.json +++ b/tools/catalog-build/package.json @@ -12,6 +12,6 @@ }, "devDependencies": { "gray-matter": "^4.0.3", - "js-yaml": "^4.1.0" + "js-yaml": "^5.2.1" } } From a870a950085772ebd6ba5b39c2131ac851e852f7 Mon Sep 17 00:00:00 2001 From: Alejandro Lopez Date: Thu, 23 Jul 2026 10:23:13 -0500 Subject: [PATCH 2/2] fix(catalog-build): use namespace import for js-yaml v5 js-yaml v5 is ESM-only and no longer ships a default export, so `import yaml from 'js-yaml'` throws at load time and breaks `npm run check`. Switch to a namespace import; yaml.load and yaml.JSON_SCHEMA remain available as named exports. --- tools/catalog-build/index.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/catalog-build/index.js b/tools/catalog-build/index.js index 5f0d617..bd9d58c 100644 --- a/tools/catalog-build/index.js +++ b/tools/catalog-build/index.js @@ -3,7 +3,7 @@ import { existsSync, readdirSync, readFileSync, writeFileSync } from 'node:fs'; import { dirname, join, relative, sep } from 'node:path'; import { fileURLToPath } from 'node:url'; import matter from 'gray-matter'; -import yaml from 'js-yaml'; +import * as yaml from 'js-yaml'; const toolDirectory = dirname(fileURLToPath(import.meta.url)); const repositoryRoot = join(toolDirectory, '..', '..');