OpenModelica / modelica-language-server / 34963154675

84%

push

github

Update js-yaml to 4.3.2 (#81)

`npm audit` reports js-yaml 4.2.0, pulled in by mocha, as vulnerable
(high): quadratic CPU consumption from merge-key chains and !!omap
resolution.

- GHSA-52cp-r559-cp3m (CVE-2026-59869), fixed in 4.3.0
- GHSA-5p4m-2wfm-xmqj, fixed in 4.3.1
- GHSA-2883-xcg3-v3hh (CVE-2026-84375), fixed in 4.3.2

4.3.2 is within mocha's ^4.1.0 range, so only package-lock.json changes.
js-yaml is a dev dependency and not part of the extension or the server.

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

455 of 602 branches covered (75.58%)

Branch coverage included in aggregate %.

2871 of 3705 relevant lines covered (77.49%)

13.25 hits per line