@splitsoftware/splitio 11.10.0 → 11.10.1

package/CHANGES.txt

@@ -1,3 +1,6 @@
+11.10.1 (February 3, 2026)
+ - Updated js-yaml dependency for vulnerability fixes (Related to issue https://github.com/splitio/javascript-client/issues/913).
+
 11.10.0 (January 28, 2026)
  - Updated @splitsoftware/splitio-commons package to version 2.11.0, which:
     - Added functionality to provide metadata alongside SDK update and READY events. Read more in our docs.

package/cjs/settings/defaults/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.packageVersion = void 0;
-exports.packageVersion = '11.10.0';
+exports.packageVersion = '11.10.1';

package/cjs/sync/offline/splitsParserFromFile.js

@@ -98,7 +98,7 @@ function splitsParserFromFileFactory() {
             if (data === previousMock)
                 return false;
             previousMock = data;
-            yamldoc = js_yaml_1.default.safeLoad(data);
+            yamldoc = js_yaml_1.default.load(data);
         }
         catch (e) {
             log.error(e);

package/esm/settings/defaults/version.js

@@ -1 +1 @@
-export var packageVersion = '11.10.0';
+export var packageVersion = '11.10.1';

package/esm/sync/offline/splitsParserFromFile.js

@@ -94,7 +94,7 @@ export function splitsParserFromFileFactory() {
             if (data === previousMock)
                 return false;
             previousMock = data;
-            yamldoc = yaml.safeLoad(data);
+            yamldoc = yaml.load(data);
         }
         catch (e) {
             log.error(e);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@splitsoftware/splitio",
-  "version": "11.10.0",
+  "version": "11.10.1",
   "description": "Split SDK",
   "files": [
     "README.md",
@@ -41,7 +41,7 @@
     "@splitsoftware/splitio-commons": "2.11.0",
     "bloom-filters": "^3.0.4",
     "ioredis": "^4.28.0",
-    "js-yaml": "^3.13.1",
+    "js-yaml": "^4.1.1",
     "node-fetch": "^2.7.0",
     "tslib": "^2.3.1",
     "unfetch": "^4.2.0"

package/src/settings/defaults/version.js

@@ -1 +1 @@
-export const packageVersion = '11.10.0';
+export const packageVersion = '11.10.1';

package/src/sync/offline/splitsParserFromFile.js

@@ -115,7 +115,7 @@ export function splitsParserFromFileFactory() {
       if (data === previousMock) return false;
       previousMock = data;
 
-      yamldoc = yaml.safeLoad(data);
+      yamldoc = yaml.load(data);
     } catch (e) {
       log.error(e);