Merge pull request #1028 from docker/dependabot/npm_and_yarn/js-yaml-5.2.0

build(deps): bump js-yaml from 4.1.1 to 5.2.0

dist/licenses.txt

@@ -2820,11 +2820,12 @@ SOFTWARE.
 
 -----------
 
-The following npm package may be included in this product:
+The following npm packages may be included in this product:
 
  - js-yaml@4.1.1
+ - js-yaml@5.2.0
 
-This package contains the following license:
+These packages each contain the following license:
 
 (The MIT License)
 

package.json

@@ -29,7 +29,7 @@
     "@docker/actions-toolkit": "^0.91.0",
     "http-proxy-agent": "^9.0.0",
     "https-proxy-agent": "^9.0.0",
-    "js-yaml": "^4.1.1"
+    "js-yaml": "^5.2.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.3",

yarn.lock

@@ -3262,7 +3262,7 @@ __metadata:
     globals: "npm:^17.3.0"
     http-proxy-agent: "npm:^9.0.0"
     https-proxy-agent: "npm:^9.0.0"
-    js-yaml: "npm:^4.1.1"
+    js-yaml: "npm:^5.2.0"
     prettier: "npm:^3.8.1"
     typescript: "npm:^5.9.3"
     vitest: "npm:^4.0.18"
@@ -4445,6 +4445,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"js-yaml@npm:^5.2.0":
+  version: 5.2.0
+  resolution: "js-yaml@npm:5.2.0"
+  dependencies:
+    argparse: "npm:^2.0.1"
+  bin:
+    js-yaml: bin/js-yaml.mjs
+  checksum: 10/8a5e55c5d0fcafae4ac02114a99dc070048b8e5a82a056089ce1f69f8a00fd8eb05b622e76ad50aac1f9d409010636c9616c6b2ed4e58dae138379a60d301220
+  languageName: node
+  linkType: hard
+
 "jsbn@npm:1.1.0":
   version: 1.1.0
   resolution: "jsbn@npm:1.1.0"