From 10dd498104fee4555c2f8615a9ddcb477e1e5053 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 7 Sep 2026 13:48:40 +0000
Subject: [PATCH] chore(deps): bump js-yaml from 4.1.1 to 4.3.1

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.3.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pnpm-lock.yaml                                | 24 +++++++------------
 services/apps/cron_service/package.json       |  2 +-
 services/apps/packages_worker/package.json    |  2 +-
 .../package.json                              |  2 +-
 4 files changed, 12 insertions(+), 18 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6eabbf017d..b81076ecdf 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -581,7 +581,7 @@ importers:
         version: 24.13.3
       eslint:
         specifier: 'catalog:'
-        version: 8.57.0(supports-color@5.5.0)
+        version: 8.57.0(supports-color@8.1.1)
       nodemon:
         specifier: ^3.0.1
         version: 3.1.0
@@ -750,8 +750,8 @@ importers:
         specifier: ^1.3.0
         version: 1.3.2
       js-yaml:
-        specifier: ^4.1.0
-        version: 4.1.1
+        specifier: ^4.3.1
+        version: 4.3.1
       p-queue:
         specifier: ^8.1.0
         version: 8.1.0
@@ -1518,8 +1518,8 @@ importers:
         specifier: ^5.8.0
         version: 5.8.0
       js-yaml:
-        specifier: ^4.1.1
-        version: 4.1.1
+        specifier: ^4.3.1
+        version: 4.3.1
       jsonwebtoken:
         specifier: ^9.0.0
         version: 9.0.3
@@ -1936,8 +1936,8 @@ importers:
         specifier: 'catalog:'
         version: 1.19.0(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
       js-yaml:
-        specifier: ^4.1.1
-        version: 4.1.1
+        specifier: ^4.3.1
+        version: 4.3.1
       moment:
         specifier: ~2.29.4
         version: 2.29.4
@@ -8387,10 +8387,6 @@ packages:
     resolution: {integrity: sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==}
     hasBin: true
 
-  js-yaml@4.1.1:
-    resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
-    hasBin: true
-
   js-yaml@4.3.1:
     resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
     hasBin: true
@@ -9589,6 +9585,7 @@ packages:
   prom-client@15.1.3:
     resolution: {integrity: sha512-6ZiOBfCywsD4k1BN9IX0uZhF+tJkV8q8llP64G5Hajs4JOeVLPCwpPVcpXy3BwYiUGgyJzsJJQeOIv7+hDSq8g==}
     engines: {node: ^16 || ^18 || >=20}
+    deprecated: prom-client has been replaced by @prometheus-io/client
 
   proto-list@1.2.4:
     resolution: {integrity: sha512-vtK/94akxsTMhe0/cbfpR+syPuszcuwhqVjJq26CuNDgFGj682oRBXOP5MJpv2r7JtE8MsiepGIqvvOTBwn2vA==}
@@ -10787,6 +10784,7 @@ packages:
 
   utilium@1.10.1:
     resolution: {integrity: sha512-GQINDTb/ocyz4acQj3GXAe0wipYxws6L+9ouqaq10KlInTk9DGvW9TJd0pYa/Xu3cppNnZuB4T/sBuSXpcN2ng==}
+    deprecated: v1 is no longer supported, please upgrade.
 
   utils-merge@1.0.1:
     resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
@@ -18878,10 +18876,6 @@ snapshots:
       argparse: 1.0.10
       esprima: 4.0.1
 
-  js-yaml@4.1.1:
-    dependencies:
-      argparse: 2.0.1
-
   js-yaml@4.3.1:
     dependencies:
       argparse: 2.0.1
diff --git a/services/apps/cron_service/package.json b/services/apps/cron_service/package.json
index 43d9d29b4a..4bc3c2407c 100644
--- a/services/apps/cron_service/package.json
+++ b/services/apps/cron_service/package.json
@@ -27,7 +27,7 @@
     "@crowd/telemetry": "workspace:*",
     "@crowd/redis": "workspace:*",
     "@aws-sdk/client-s3": "^3.700.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.1",
     "@dsnp/parquetjs": "^1.7.0",
     "cron": "^2.1.0",
     "cron-time-generator": "^1.3.0",
diff --git a/services/apps/packages_worker/package.json b/services/apps/packages_worker/package.json
index d34f2c4b26..3e1c4d710b 100644
--- a/services/apps/packages_worker/package.json
+++ b/services/apps/packages_worker/package.json
@@ -100,7 +100,7 @@
     "@temporalio/activity": "catalog:",
     "@temporalio/client": "catalog:",
     "@temporalio/workflow": "catalog:",
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.3.1",
     "jsonwebtoken": "^9.0.0",
     "semver": "^7.6.0",
     "axios": "catalog:",
diff --git a/services/apps/security_best_practices_worker/package.json b/services/apps/security_best_practices_worker/package.json
index d2908ca249..4aceb0f12f 100644
--- a/services/apps/security_best_practices_worker/package.json
+++ b/services/apps/security_best_practices_worker/package.json
@@ -24,7 +24,7 @@
     "@temporalio/client": "catalog:",
     "@temporalio/workflow": "catalog:",
     "axios": "catalog:",
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.3.1",
     "moment": "~2.29.4",
     "tsx": "catalog:",
     "typescript": "catalog:"