From 22fd4a478076afc9882d2350a403c1784a85f511 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 18 Sep 2026 06:06:56 +0000
Subject: [PATCH] build(deps): bump js-yaml from 4.3.2 to 5.4.2

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.2 to 5.4.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.3.2...5.4.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 10 +++++-----
 package.json      |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c9e1b74..5ccbf5b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "@actions/core": "^3.0.1",
         "activitysmith": "^1.10.0",
         "flat": "^6.0.1",
-        "js-yaml": "^4.3.0"
+        "js-yaml": "^5.4.2"
       },
       "devDependencies": {
         "@vercel/ncc": "^0.44.1"
@@ -91,9 +91,9 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "4.3.2",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz",
-      "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==",
+      "version": "5.4.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz",
+      "integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==",
       "funding": [
         {
           "type": "github",
@@ -109,7 +109,7 @@
         "argparse": "^2.0.1"
       },
       "bin": {
-        "js-yaml": "bin/js-yaml.js"
+        "js-yaml": "bin/js-yaml.mjs"
       }
     },
     "node_modules/tunnel": {
diff --git a/package.json b/package.json
index 2e20a97..99af6ae 100644
--- a/package.json
+++ b/package.json
@@ -40,7 +40,7 @@
     "@actions/core": "^3.0.1",
     "activitysmith": "^1.10.0",
     "flat": "^6.0.1",
-    "js-yaml": "^4.3.0"
+    "js-yaml": "^5.4.2"
   },
   "devDependencies": {
     "@vercel/ncc": "^0.44.1"