Sourced from js-yaml's changelog.
[4.2.0] - 2026-06-01
Added
- Added
docs/safety.mdwith notes about processing untrusted YAML.- Added
maxDepth(100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.- Added
maxMergeSeqLength(20) loader option. Not a problem aftermergefix, but an additional restriction for safety.- Added sourcemaps to
dist/builds.Changed
- Stop resolving numbers with underscores as numeric scalars, #627.
- Switched dev toolchains to Vite / neostandard.
- Updated demo.
- Reorganized tests.
dist/files are no longer kept in the repository.Fixed
- Fix parsing of properties on the first implicit block mapping key, #62.
- Fix trailing whitespace handling when folding flow scalar lines, #307.
- Reject top-level block scalars without content indentation, #280.
- Ensure numbers survive round-trip, #737.
- Fix test coverage for issue #221.
- Fix flow scalar trailing whitespace folding, #307.
- Fix digits in YAML named tag handles.
Security
- Fix potential DoS via quadratic complexity in merge - deduplicate repeated elements (makes sense for malformed files > 10K).
[3.14.2] - 2025-11-15
Security
- Backported v4.1.1 fix to v3
Sourced from vite's releases.
v8.0.16
Please refer to CHANGELOG.md for details.
v8.0.15
Please refer to CHANGELOG.md for details.
v8.0.14
Please refer to CHANGELOG.md for details.
v8.0.13
Please refer to CHANGELOG.md for details.
v8.0.12
Please refer to CHANGELOG.md for details.
v8.0.11
Please refer to CHANGELOG.md for details.
Sourced from vite's changelog.
8.0.16 (2026-06-01)
Bug Fixes
- deps: reject UNC paths for launch-editor-middleware (#22571) (50b9512)
- reject windows alternate paths (#22572) (dc245c7)
8.0.15 (2026-06-01)
Features
Bug Fixes
- capitalize error messages and remove spurious space in parse error (#22488) (85a0eff)
- deps: update all non-major dependencies (#22511) (2686d7d)
- dev: fix html-proxy cache key mismatch for /@fs/ HTML paths (#21762) (47c4213)
- glob: error on relative glob in virtual module when no files match (#22497) (5c8e98f)
- optimizer: close the rolldown bundle when write() rejects (#22528) (e3cfb9d)
- resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#22509) (40985f1)
Miscellaneous Chores
Code Refactoring
8.0.14 (2026-05-21)
Features
Bug Fixes
- deps: update all non-major dependencies (#22471) (98b8163)
- dev: handle errors when sending messages to vite server (#22450) (e8e9a34)
- html: handle trailing slash paths in transformIndexHtml (#22480) (5d94d1b)
- optimizer: pass oxc jsx options to transformSync in dependency scan (#22342) (b3132da)
Miscellaneous Chores
- deps: update rolldown-related dependencies (#22470) (7cb728e)
- remove irrelevant commits from changelog (2c69495)
Code Refactoring
... (truncated)
f94df87
release: v8.0.16dc245c7
fix: reject windows alternate paths (#22572)50b9512
fix(deps): reject UNC paths for launch-editor-middleware (#22571)8d1b019
release: v8.0.152686d7d
fix(deps): update all non-major dependencies (#22511)3052a67
chore(deps): update rolldown-related dependencies (#22566)e3cfb9d
fix(optimizer): close the rolldown bundle when write() rejects (#22528)6978a9c
refactor: correct logic in collectAllModules function (#22562)646dbed
feat: update rolldown to 1.0.3 (#22538)85a0eff
fix: capitalize error messages and remove spurious space in parse error
(#22488)Sourced from vite's releases.
v8.0.16
Please refer to CHANGELOG.md for details.
v8.0.15
Please refer to CHANGELOG.md for details.
v8.0.14
Please refer to CHANGELOG.md for details.
v8.0.13
Please refer to CHANGELOG.md for details.
v8.0.12
Please refer to CHANGELOG.md for details.
v8.0.11
Please refer to CHANGELOG.md for details.
Sourced from vite's changelog.
8.0.16 (2026-06-01)
Bug Fixes
- deps: reject UNC paths for launch-editor-middleware (#22571) (50b9512)
- reject windows alternate paths (#22572) (dc245c7)
8.0.15 (2026-06-01)
Features
Bug Fixes
- capitalize error messages and remove spurious space in parse error (#22488) (85a0eff)
- deps: update all non-major dependencies (#22511) (2686d7d)
- dev: fix html-proxy cache key mismatch for /@fs/ HTML paths (#21762) (47c4213)
- glob: error on relative glob in virtual module when no files match (#22497) (5c8e98f)
- optimizer: close the rolldown bundle when write() rejects (#22528) (e3cfb9d)
- resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#22509) (40985f1)
Miscellaneous Chores
Code Refactoring
8.0.14 (2026-05-21)
Features
Bug Fixes
- deps: update all non-major dependencies (#22471) (98b8163)
- dev: handle errors when sending messages to vite server (#22450) (e8e9a34)
- html: handle trailing slash paths in transformIndexHtml (#22480) (5d94d1b)
- optimizer: pass oxc jsx options to transformSync in dependency scan (#22342) (b3132da)
Miscellaneous Chores
- deps: update rolldown-related dependencies (#22470) (7cb728e)
- remove irrelevant commits from changelog (2c69495)
Code Refactoring
... (truncated)
f94df87
release: v8.0.16dc245c7
fix: reject windows alternate paths (#22572)50b9512
fix(deps): reject UNC paths for launch-editor-middleware (#22571)8d1b019
release: v8.0.152686d7d
fix(deps): update all non-major dependencies (#22511)3052a67
chore(deps): update rolldown-related dependencies (#22566)e3cfb9d
fix(optimizer): close the rolldown bundle when write() rejects (#22528)6978a9c
refactor: correct logic in collectAllModules function (#22562)646dbed
feat: update rolldown to 1.0.3 (#22538)85a0eff
fix: capitalize error messages and remove spurious space in parse error
(#22488)