Bump js-yaml and vercel in /frontend

[dependabot]

Bumps js-yaml to 4.3.2 and updates ancestor dependency vercel. These dependencies need to be updated together.

Updates js-yaml from 4.1.1 to 4.3.2

Changelog

Sourced from js-yaml's changelog.

4.3.2 - 2026-08-26

Changed

• [backport] Hard-limit merge sequence size to 100.

Security

• [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

4.3.1 - 2026-07-31

Security

• [backport] Remove quadratic complexity from !!omap duplicate key detection.

4.3.0 - 2026-06-27

Added

• [backport] Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.

Fixed

• Restore umd builds back to es5.

Removed

• [backport] maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

[4.2.0] - 2026-06-01

Added

• Added docs/safety.md with notes about processing untrusted YAML.
• Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.
• Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.
• Added sourcemaps to dist/ builds.

Changed

• Stop resolving numbers with underscores as numeric scalars, #627.
• Switched dev toolchains to Vite / neostandard.
• Updated demo.
• Reorganized tests.
• dist/ files are no longer kept in the repository.

Fixed

• Fix parsing of properties on the first implicit block mapping key, #62.
• Fix trailing whitespace handling when folding flow scalar lines, #307.
• Reject top-level block scalars without content indentation, #280.
• Ensure numbers survive round-trip, #737.
• Fix test coverage for issue #221.
• Fix flow scalar trailing whitespace folding, #307.

... (truncated)

Commits

• 79ca68d 4.3.2 released
• d90b661 Backport merge limits from v5.4.1
• 86e91b8 4.3.1 released
• c3cc4b0 Backport quadratic complexity fix for !!omap
• 33d05b5 4.3.0 released
• 663bfab Drop demo publish, to not override new v5 one.
• 1cb8c7b Add v4-legacy tag for publish
• 02f27af Restore umd builds back to es5
• 8be84ed Fix es5 compatibility
• 59423c6 Replace maxMergeSeqLength option with maxTotalMergeKeys (more robust). Ba...
• Additional commits viewable in compare view

Updates vercel from 50.25.4 to 50.44.0

Changelog

Sourced from vercel's changelog.

50.44.0

Minor Changes

• Add vercel oauth-apps to list installation requests, dismiss requests, install apps by OAuth client id, and remove installations. (#15846)

• Add vercel teams sso to show SAML/SSO configuration for the current team. (#15847)

Patch Changes

• Fetch check run logs inline and use checkRunLog deep-link for failed deployment checks. (#15906)

• Add mount support for experimental services across config validation and service resolution. (#15882)

• Updated dependencies [9b3ea340f23c1faad6d56c2a54d75bb2e77b0162, 4362505f1f5bf9b8fa0738dec2ad3189edc933b2]:

  • @​vercel/build-utils@​13.14.2
  • @​vercel/next@​4.16.6
  • @​vercel/backends@​0.0.59
  • @​vercel/elysia@​0.1.62
  • @​vercel/express@​0.1.72
  • @​vercel/fastify@​0.1.65
  • @​vercel/go@​3.4.7
  • @​vercel/h3@​0.1.71
  • @​vercel/hono@​0.2.65
  • @​vercel/hydrogen@​1.3.6
  • @​vercel/koa@​0.1.45
  • @​vercel/nestjs@​0.2.66
  • @​vercel/node@​5.7.4
  • @​vercel/python@​6.29.0
  • @​vercel/redwood@​2.4.12
  • @​vercel/remix-builder@​5.7.2
  • @​vercel/ruby@​2.3.2
  • @​vercel/rust@​1.1.0
  • @​vercel/static-build@​2.9.12

50.43.0

Minor Changes

• Add Deployment Checks support to deploy --prod. Shows "Running Checks..." spinner when checks are pending, detects check failures before alias promotion, and displays failed check run details with links to logs. (#15884)

• Extend marketplace integration CLI parity: add vercel integration installations to list team installations (with optional --integration filter and JSON output), align vercel integration update argument parsing with other subcommands (parse only tokens after update, so the integration slug is the first positional), and ship related help/telemetry updates. (#15849)

• Add vercel project protection actions for automation protection bypass via PATCH /v1/projects/.../protection-bypass (--protection-bypass). (#15862)

• Add vercel project protection actions for customer support code visibility (--customer-support-code-visibility). (#15860)

• Add vercel project protection actions for Git fork protection (--git-fork-protection). (#15861)

• [services] migrate python workers to Queues V3 API (#15885)

... (truncated)

Commits

• 6d17b0c Version Packages (#15903)
• 23c2670 [cli] Fetch check run logs inline and use checkRunLog deep-link (#15906)
• 9b3ea34 [experimental-services] new schema: add mount support (#15882)
• 794fb14 [CLI] feat: team SSO (#15847)
• 79747ac [CLI] feat: OAuth / connected apps parity scope (CLI-234) (#15846)
• 57993f5 Version Packages (#15880)
• 48ea2ae [CLI] feat: Marketplace integration lifecycle parity scope (CLI-237) (#15849)
• 61c17f9 [cli] Add v2 deployment checks handling to deploy --prod (#15884)
• 2b798db feat(cli): add rules list and inspect commands (#15722)
• 004bd38 [CLI] Adding better telemetry (#15872)
• Additional commits viewable in compare view

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
nexus	Ignored	Preview	Aug 31, 2026 5:23pm