From 36cb86c886d7459e89e615283e748c4e6e6dc579 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 31 Jul 2026 13:24:39 +0200 Subject: [PATCH] fix(deps): update dependency js-yaml to v5 [security] (#30440) Co-authored-by: Daniel Dietzler --- pnpm-lock.yaml | 4 ++-- server/package.json | 2 +- server/src/services/system-config.service.spec.ts | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 1f9120825d..1e9a9333c5 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -536,8 +536,8 @@ importers: specifier: ^6.0.0 version: 6.2.4 js-yaml: - specifier: ^4.1.0 - version: 4.3.0 + specifier: ^5.0.0 + version: 5.2.1 jsonwebtoken: specifier: ^9.0.2 version: 9.0.3 diff --git a/server/package.json b/server/package.json index 8e3559874f..7d5f73cc61 100644 --- a/server/package.json +++ b/server/package.json @@ -82,7 +82,7 @@ "i18n-iso-countries": "^7.6.0", "ioredis": "^5.8.2", "jose": "^6.0.0", - "js-yaml": "^4.1.0", + "js-yaml": "^5.0.0", "jsonwebtoken": "^9.0.2", "kysely": "0.28.17", "kysely-postgres-js": "^3.0.0", diff --git a/server/src/services/system-config.service.spec.ts b/server/src/services/system-config.service.spec.ts index d5404048c0..08851da96a 100644 --- a/server/src/services/system-config.service.spec.ts +++ b/server/src/services/system-config.service.spec.ts @@ -362,7 +362,7 @@ describe(SystemConfigService.name, () => { expect(mocks.logger.error).toHaveBeenCalledTimes(2); expect(mocks.logger.error.mock.calls[0][0]).toEqual('Unable to load configuration file: immich-config.json'); expect(mocks.logger.error.mock.calls[1][0].toString()).toEqual( - expect.stringContaining('YAMLException: duplicated mapping key (1:20)'), + expect.stringContaining('YAMLException: duplicated mapping key (1:21)'), ); });