projen 0.101.11 → 0.101.13

package/node_modules/js-yaml/lib/loader.js

@@ -152,7 +152,7 @@ function State (input, options) {
   this.json = options['json'] || false
   this.listener = options['listener'] || null
   this.maxDepth = typeof options['maxDepth'] === 'number' ? options['maxDepth'] : 100
-  this.maxMergeSeqLength = typeof options['maxMergeSeqLength'] === 'number' ? options['maxMergeSeqLength'] : 20
+  this.maxTotalMergeKeys = typeof options['maxTotalMergeKeys'] === 'number' ? options['maxTotalMergeKeys'] : 10000
 
   this.implicitTypes = this.schema.compiledImplicit
   this.typeMap = this.schema.compiledTypeMap
@@ -163,6 +163,7 @@ function State (input, options) {
   this.lineStart = 0
   this.lineIndent = 0
   this.depth = 0
+  this.totalMergeKeys = 0
 
   // position of first leading tab in the current line,
   // used to make sure there are no tabs in the indentation
@@ -380,6 +381,10 @@ function mergeMappings (state, destination, source, overridableKeys) {
   for (let index = 0, quantity = sourceKeys.length; index < quantity; index += 1) {
     const key = sourceKeys[index]
 
+    if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) {
+      throwError(state, 'merge keys exceeded maxTotalMergeKeys (' + state.maxTotalMergeKeys + ')')
+    }
+
     if (!_hasOwnProperty.call(destination, key)) {
       setProperty(destination, key, source[key])
       overridableKeys[key] = true
@@ -421,17 +426,8 @@ function storeMappingPair (state, _result, overridableKeys, keyTag, keyNode, val
 
   if (keyTag === 'tag:yaml.org,2002:merge') {
     if (Array.isArray(valueNode)) {
-      if (valueNode.length > state.maxMergeSeqLength) {
-        throwError(state, 'merge sequence length exceeded maxMergeSeqLength (' + state.maxMergeSeqLength + ')')
-      }
-      const seen = new Set()
       for (let index = 0, quantity = valueNode.length; index < quantity; index += 1) {
-        const src = valueNode[index]
-        // Existing keys are not overridden on merge, so dedupe sources to
-        // avoid redundant work on repeated aliases.
-        if (seen.has(src)) continue
-        seen.add(src)
-        mergeMappings(state, _result, src, overridableKeys)
+        mergeMappings(state, _result, valueNode[index], overridableKeys)
       }
     } else {
       mergeMappings(state, _result, valueNode, overridableKeys)

package/node_modules/js-yaml/lib/type/float.js

@@ -28,7 +28,7 @@ function resolveYamlFloat (data) {
     return false
   }
 
-  if (Number.isFinite(parseFloat(data, 10))) {
+  if (isFinite(parseFloat(data, 10))) {
     return true
   }
 

package/node_modules/js-yaml/lib/type/int.js

@@ -49,7 +49,7 @@ function resolveYamlInteger (data) {
         if (ch !== '0' && ch !== '1') return false
         hasDigits = true
       }
-      return hasDigits && Number.isFinite(parseYamlInteger(data))
+      return hasDigits && isFinite(parseYamlInteger(data))
     }
 
     if (ch === 'x') {
@@ -60,7 +60,7 @@ function resolveYamlInteger (data) {
         if (!isHexCode(data.charCodeAt(index))) return false
         hasDigits = true
       }
-      return hasDigits && Number.isFinite(parseYamlInteger(data))
+      return hasDigits && isFinite(parseYamlInteger(data))
     }
 
     if (ch === 'o') {
@@ -71,7 +71,7 @@ function resolveYamlInteger (data) {
         if (!isOctCode(data.charCodeAt(index))) return false
         hasDigits = true
       }
-      return hasDigits && Number.isFinite(parseYamlInteger(data))
+      return hasDigits && isFinite(parseYamlInteger(data))
     }
   }
 
@@ -86,7 +86,7 @@ function resolveYamlInteger (data) {
 
   if (!hasDigits) return false
 
-  return Number.isFinite(parseYamlInteger(data))
+  return isFinite(parseYamlInteger(data))
 }
 
 function parseYamlInteger (data) {

package/node_modules/js-yaml/package.json

@@ -1,6 +1,6 @@
 {
   "name": "js-yaml",
-  "version": "4.2.0",
+  "version": "4.3.0",
   "description": "YAML 1.2 parser and serializer",
   "keywords": [
     "yaml",
@@ -32,6 +32,9 @@
     "bin/",
     "dist/"
   ],
+  "publishConfig": {
+    "tag": "v4-legacy"
+  },
   "bin": {
     "js-yaml": "bin/js-yaml.js"
   },
@@ -53,8 +56,7 @@
     "build": "node support/build-dist.mjs",
     "build:demo": "npm run lint && node support/build_demo.mjs",
     "gh-demo": "npm run build:demo && gh-pages -d demo -f",
-    "prepack": "npm test && npm run build && npm run build:demo",
-    "postpublish": "npm run gh-demo"
+    "prepack": "npm test && npm run build"
   },
   "unpkg": "dist/js-yaml.min.js",
   "jsdelivr": "dist/js-yaml.min.js",
@@ -62,6 +64,10 @@
     "argparse": "^2.0.1"
   },
   "devDependencies": {
+    "@babel/core": "8.0.1",
+    "@babel/preset-env": "8.0.1",
+    "@rollup/plugin-commonjs": "29.0.3",
+    "@rollup/plugin-terser": "0.4.4",
     "c8": "^11.0.0",
     "codemirror": "^5.65.21",
     "eslint": "^9.39.4",
@@ -69,7 +75,7 @@
     "gh-pages": "^6.3.0",
     "neostandard": "^0.13.0",
     "tinybench": "^6.0.2",
-    "vite": "^8.0.14",
+    "vite": "7.3.6",
     "vite-plugin-node-polyfills": "^0.28.0",
     "vite-plugin-singlefile": "^2.3.3",
     "workerpool": "^10.0.2"

package/package.json

@@ -55,7 +55,7 @@
     "organization": true
   },
   "devDependencies": {
-    "@biomejs/biome": "^2",
+    "@biomejs/biome": "^2.5",
     "@jsii/check-node": "^1.138.0",
     "@types/conventional-changelog-config-spec": "^2.1.5",
     "@types/ini": "^1.3.34",
@@ -153,7 +153,7 @@
     "fsevents": true,
     "unrs-resolver": true
   },
-  "version": "0.101.11",
+  "version": "0.101.13",
   "jest": {
     "coverageProvider": "v8",
     "coverageReporters": [