From be41cff5e21209f698f4acc4b48bed82168f41cf Mon Sep 17 00:00:00 2001
From: Giteabot <teabot@gitea.io>
Date: Fri, 24 Jul 2026 14:20:03 -0700
Subject: [PATCH] fix(deps): update dependency js-yaml to v5.2.2 [security]
 (#38622)

---
 assets/codemirror-languages.json |  1 +
 package.json                     |  2 +-
 pnpm-lock.yaml                   | 12 ++++++------
 3 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/assets/codemirror-languages.json b/assets/codemirror-languages.json
index 1ec42c9e05..0ec2dd8276 100644
--- a/assets/codemirror-languages.json
+++ b/assets/codemirror-languages.json
@@ -453,6 +453,7 @@
       ".htmlhintrc",
       ".imgbotconfig",
       ".nycrc",
+      ".secrets.baseline",
       ".tern-config",
       ".tern-project",
       ".watchmanconfig",
diff --git a/package.json b/package.json
index 22ec3c5c3d..9e79cb805d 100644
--- a/package.json
+++ b/package.json
@@ -50,7 +50,7 @@
     "esbuild": "0.28.1",
     "idiomorph": "0.7.4",
     "jquery": "4.0.0",
-    "js-yaml": "5.2.1",
+    "js-yaml": "5.2.2",
     "katex": "0.17.0",
     "mermaid": "11.16.0",
     "online-3d-viewer": "0.18.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7f1dc12daf..fe5e221d42 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -141,8 +141,8 @@ importers:
         specifier: 4.0.0
         version: 4.0.0
       js-yaml:
-        specifier: 5.2.1
-        version: 5.2.1
+        specifier: 5.2.2
+        version: 5.2.2
       katex:
         specifier: 0.17.0
         version: 0.17.0
@@ -3027,8 +3027,8 @@ packages:
     resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
     hasBin: true
 
-  js-yaml@5.2.1:
-    resolution: {integrity: sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==}
+  js-yaml@5.2.2:
+    resolution: {integrity: sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==}
     hasBin: true
 
   jsdoc-type-pratt-parser@7.2.0:
@@ -7506,7 +7506,7 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
-  js-yaml@5.2.1:
+  js-yaml@5.2.2:
     dependencies:
       argparse: 2.0.1
 
@@ -7689,7 +7689,7 @@ snapshots:
       commander: 15.0.0
       deep-extend: 0.6.0
       ignore: 7.0.6
-      js-yaml: 5.2.1
+      js-yaml: 5.2.2
       jsonc-parser: 3.3.1
       jsonpointer: 5.0.1
       markdown-it: 14.3.0