From 29c89898cd2b06e877de45735580556d0bdd21d3 Mon Sep 17 00:00:00 2001
From: FROWNINGdev <frowningdev@gmail.com>
Date: Fri, 11 Sep 2026 23:52:46 +0500
Subject: [PATCH] chore(deps): bump transitive js-yaml to 4.3.2

Dependabot alert #14 (high): maxTotalMergeKeys does not limit CPU use
for empty merge sources, affecting >=4.0.0 <4.3.2. Dev-only, transitive.
Only the js-yaml entry changes; the lockfile was not regenerated, so the
libc fields a newer npm writes stay as they are.
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 9f9d234..c5418c3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3428,9 +3428,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.3.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
-      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz",
+      "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==",
       "dev": true,
       "funding": [
         {