Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override for 0 vulnerabilities (#943)

* Bump js-yaml from 4.1.1 to 4.2.0

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump js-yaml to version 4.2.0

* chore: update package.json and package-lock.json with undici override and bump js-yaml to 4.2.0

* chore: remove obsolete license files for busboy and undici, add undici license file

* chore: update version to 6.2.0 in package.json and regenerate package-lock.json

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: chiranjib-swain <chiranjib-swain@github.com>
This commit is contained in:
dependabot[bot]
2026-07-06 11:54:28 -05:00
committed by GitHub
co-authored by chiranjib-swain
parent f612d9ad18
commit 53affe8ca4
8 changed files with 17292 additions and 40974 deletions
+5 -2
View File
@@ -1,6 +1,6 @@
{
"name": "labeler",
"version": "6.1.0",
"version": "6.2.0",
"description": "Labels pull requests by files altered",
"main": "lib/main.js",
"engines": {
@@ -30,10 +30,13 @@
"@actions/core": "^2.0.3",
"@actions/github": "^6.0.1",
"@octokit/plugin-retry": "^6.0.0",
"js-yaml": "^4.1.1",
"js-yaml": "^4.2.0",
"lodash.isequal": "^4.5.0",
"minimatch": "^10.2.5"
},
"overrides": {
"undici": "6.27.0"
},
"devDependencies": {
"@types/jest": "^29.5.14",
"@types/js-yaml": "^4.0.9",