From 61d7a4264783f0ae3ca727a78996af00079f97c9 Mon Sep 17 00:00:00 2001
From: GioDavid <davisxdpfr@gmail.com>
Date: Fri, 2 Oct 2026 00:16:59 -0500
Subject: [PATCH] fix(security): update js-yaml to 3.15.2

The coverage tooling path still resolved js-yaml 3.14.2, which is affected by merge-key denial-of-service advisories fixed in 3.15.2. The existing ^3.13.1 range already allows that release.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 yarn.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/yarn.lock b/yarn.lock
index 9be90ff5..260c19b9 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -8992,14 +8992,14 @@ __metadata:
   linkType: hard
 
 "js-yaml@npm:^3.13.1":
-  version: 3.14.2
-  resolution: "js-yaml@npm:3.14.2"
+  version: 3.15.2
+  resolution: "js-yaml@npm:3.15.2"
   dependencies:
     argparse: "npm:^1.0.7"
     esprima: "npm:^4.0.0"
   bin:
     js-yaml: bin/js-yaml.js
-  checksum: 10/172e0b6007b0bf0fc8d2469c94424f7dd765c64a047d2b790831fecef2204a4054eabf4d911eb73ab8c9a3256ab8ba1ee8d655b789bf24bf059c772acc2075a1
+  checksum: 10/320b5471c1b7309a15d9c0068ba273e2da7382a369038a9746c92ef649087c3d6d2a5c676810154efb4eb2ca9584179c8ae14e2fc2e4bd558d964e6bf4fafd3d
   languageName: node
   linkType: hard