Skip to content

VULN UPGRADE: patch: @types/jest, esbuild, js-yaml [packages/datadog-ci]#2113

Closed
campaigner-prod[bot] wants to merge 2 commits intomasterfrom
engraver-auto-version-upgrade/minorpatch/npm/datadog-ci/0-1770968100
Closed

VULN UPGRADE: patch: @types/jest, esbuild, js-yaml [packages/datadog-ci]#2113
campaigner-prod[bot] wants to merge 2 commits intomasterfrom
engraver-auto-version-upgrade/minorpatch/npm/datadog-ci/0-1770968100

Conversation

@campaigner-prod
Copy link
Contributor

Summary: Security update — 3 packages upgraded (patch changes only)

Manifests changed:

  • packages/datadog-ci (npm)

Updates

Package From To Type Vulnerabilities Fixed
js-yaml 3.14.1 3.14.2 patch 2 MODERATE
@types/jest 29.5.3 29.5.14 patch -
esbuild 0.25.9 0.25.12 patch -

Packages marked with "-" are updated due to dependency constraints.


Security Details

ℹ️ Other Vulnerabilities (2)
Package CVE Severity Summary Unsafe Version Fixed In
js-yaml GHSA-mh29-5h37-fv8m MODERATE js-yaml has prototype pollution in merge (<<) 3.14.1 4.1.1
js-yaml CVE-2025-64718 MODERATE js-yaml has prototype pollution in merge (<<) 3.14.1 -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System

@dd-prapprover
Copy link

dd-prapprover bot commented Feb 13, 2026

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

🔗 Workflow Link

  • ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-02-13T07:37:02Z
  • ⬜ CI tests passed
  • ⬜ Approved
  • ⬜ Merge Started
  • ⬜ Merged

➡️ Current phase: CI tests failed, please fix and re-trigger

@Drarig29 Drarig29 requested review from a team as code owners February 13, 2026 13:49
@Drarig29 Drarig29 closed this Feb 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant