From bd527b4e3f28d7c2e22775900f4bcc0912982a28 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 26 Mar 2026 15:10:34 +0000
Subject: [PATCH] Bump yaml from 2.4.3 to 2.8.3 in /codeql/sarif_reporter

Bumps [yaml](https://github.com/eemeli/yaml) from 2.4.3 to 2.8.3.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.4.3...v2.8.3)

---
updated-dependencies:
- dependency-name: yaml
  dependency-version: 2.8.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 codeql/sarif_reporter/package-lock.json | 19 +++++++++++--------
 codeql/sarif_reporter/package.json      |  2 +-
 2 files changed, 12 insertions(+), 9 deletions(-)

diff --git a/codeql/sarif_reporter/package-lock.json b/codeql/sarif_reporter/package-lock.json
index a2719dde0a7..8d72693d056 100644
--- a/codeql/sarif_reporter/package-lock.json
+++ b/codeql/sarif_reporter/package-lock.json
@@ -10,7 +10,7 @@
       "license": "MIT",
       "dependencies": {
         "cmd-ts": "^0.13.0",
-        "yaml": "^2.4.3"
+        "yaml": "^2.8.3"
       },
       "devDependencies": {
         "@types/node": "^20.12.7",
@@ -173,14 +173,17 @@
       "dev": true
     },
     "node_modules/yaml": {
-      "version": "2.4.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.4.3.tgz",
-      "integrity": "sha512-sntgmxj8o7DE7g/Qi60cqpLBA3HG3STcDA0kO+WfB05jEKhZMbY7umNm2rBpQvsmZ16/lPXCJGW2672dgOUkrg==",
+      "version": "2.8.3",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
       "bin": {
         "yaml": "bin.mjs"
       },
       "engines": {
-        "node": ">= 14"
+        "node": ">= 14.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/eemeli"
       }
     }
   },
@@ -298,9 +301,9 @@
       "dev": true
     },
     "yaml": {
-      "version": "2.4.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.4.3.tgz",
-      "integrity": "sha512-sntgmxj8o7DE7g/Qi60cqpLBA3HG3STcDA0kO+WfB05jEKhZMbY7umNm2rBpQvsmZ16/lPXCJGW2672dgOUkrg=="
+      "version": "2.8.3",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg=="
     }
   }
 }
diff --git a/codeql/sarif_reporter/package.json b/codeql/sarif_reporter/package.json
index 6068660aecf..5efeb0967a6 100644
--- a/codeql/sarif_reporter/package.json
+++ b/codeql/sarif_reporter/package.json
@@ -17,6 +17,6 @@
   },
   "dependencies": {
     "cmd-ts": "^0.13.0",
-    "yaml": "^2.4.3"
+    "yaml": "^2.8.3"
   }
 }