Skip to content

Bump YamlDotNet from 16.3.0 to 18.1.0 - #1070

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/YamlDotNet-16.1.3
Closed

Bump YamlDotNet from 16.3.0 to 18.1.0#1070
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/YamlDotNet-16.1.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 27, 2024

Copy link
Copy Markdown
Contributor

Pinned YamlDotNet at 18.1.0.

Release notes

Sourced from YamlDotNet's releases.

18.1.0

What's Changed

New Contributors

Full Changelog: aaubry/YamlDotNet@v18.0.0...v18.1.0

Breaking

  • Maximum depth of yaml files is now 130 by default. If you need higher you will need to adjust the maximum yaml depth. Going above 130 runs the risk of stack overflow exceptions when any exception happens inside of the deserialization

18.0.0

What's Changed

  • Add a parse method wrapper and caching to fix AoT compilation by @​EdwardCooke in Add a parse method wrapper and caching to fix AoT compilation aaubry/YamlDotNet#1103
    BREAKING CHANGE This is a breaking change in the TypeInspectorSkeleton class and the ITypeInspector interface by adding 2 methods . Quick fix to resolve those breaking changes in your own custom TypeInspector is to return false on the HasParseMethod method and return null or throw an exception on the Parse method.

Full Changelog: aaubry/YamlDotNet@v17.1.0...v18.0.0

17.1.0

What's Changed

  • Security improvements by @​EdwardCooke in Security improvements aaubry/YamlDotNet#1102
    There was a potential breaking change for large yaml files in the MergingParser. You may need to specify the optional parameter for maximum events to be processed. It default to 100k events which is a very large yaml file.

Full Changelog: aaubry/YamlDotNet@v17.0.0...v17.1.0

17.0.0

What's Changed

New Contributors

Full Changelog: aaubry/YamlDotNet@v16.3.0...v17.0.0

Commits viewable in compare view.

Bumps [YamlDotNet](https://github.com/aaubry/YamlDotNet) from 15.1.6 to 16.1.3.
- [Release notes](https://github.com/aaubry/YamlDotNet/releases)
- [Commits](aaubry/YamlDotNet@v15.1.6...v16.1.3)

---
updated-dependencies:
- dependency-name: YamlDotNet
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 27, 2024
@Slendy

Slendy commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like YamlDotNet is updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 25, 2026
@dependabot dependabot Bot changed the title Bump YamlDotNet from 15.1.6 to 16.1.3 Bump YamlDotNet from 16.3.0 to 18.1.0 Aug 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant