yamlock 1.1.1 → 1.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -8,6 +8,11 @@ or removing presentation details.
8
8
  Empty or comment-only files are treated as empty mappings. Multiple YAML
9
9
  documents are rejected before processing or writing.
10
10
 
11
+ YAML merge sequences (`<<: [source1, source2, ...]`) are limited to 100 source
12
+ mappings. The loader also limits total merge work across the document, counting
13
+ empty source mappings as work. Inputs exceeding these limits are rejected before
14
+ processing or writing; neither the source nor a separate output is modified.
15
+
11
16
  ## What happens during a rewrite
12
17
 
13
18
  | YAML feature | Current behavior |
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "yamlock",
3
- "version": "1.1.1",
3
+ "version": "1.1.2",
4
4
  "author": "PAVEL TKACHEV (phoenixweiss) <mail@phoenixweiss.me>",
5
5
  "description": "Value-level encryption for YAML/JSON configuration files with CLI + Node.js APIs.",
6
6
  "license": "MIT",
@@ -57,7 +57,7 @@
57
57
  },
58
58
  "homepage": "https://github.com/phoenixweiss/yamlock#readme",
59
59
  "dependencies": {
60
- "js-yaml": "^4.3.1"
60
+ "js-yaml": "^4.3.2"
61
61
  },
62
62
  "devDependencies": {
63
63
  "@eslint/js": "^10.0.1",