chore(deps): bump js-yaml from 5.2.2 to 5.2.3

[dependabot]

Bumps js-yaml from 5.2.2 to 5.2.3.

Changelog

Sourced from js-yaml's changelog.

[5.2.3] - 2026-08-01

Fixed

• Prevent prototype fallback when resolving tags and mapping entries, #782.
• Resolve !!timestamp years 0000-0099 correctly, #775.
• Preserve implicit null mapping values before document markers and reject unpaired mapping event streams, #784.
• Preserve folded scalar values with tab-indented lines when round-tripping a parsed AST through present(); dump() and loading are unaffected, #780.

Commits

• 6740445 5.2.3 released
• 94e766d Update changelog
• c3bd7ca Polish previous commit, #780
• 00209b6 presenter: treat a tab-indented line in a folded scalar as more-indented (#780)
• 40fcb4f Fix missing mapping values before document markers and reject unpaired mappin...
• 49280f3 Fix !!timestamp resolution for years 0000-0099, #775
• 355dc96 fix: prevent prototype fallback in tag and harden object lookups, #782 (than...
• d524f83 docs: add contributing guidelines
• See full diff in compare view

[github-actions]

❌ Docker 起動・検証に失敗しました

エラーログ

…（省略）
x86_64-linux-gnu) in auto mode
#13 27.55 Setting up libxcb1:amd64 (1.15-1) ...
#13 27.56 Setting up libxcb-xfixes0:amd64 (1.15-1) ...
#13 27.56 Setting up libplacebo208:amd64 (4.208.0-3) ...
#13 27.56 Setting up libcaca0:amd64 (0.99.beta20-3+deb12u1) ...
#13 27.57 Setting up libxcb-render0:amd64 (1.15-1) ...
#13 27.57 Setting up libsoxr0:amd64 (0.1.3-4) ...
#13 27.57 Setting up libcdio-cdda2:amd64 (10.2+2.0.1-1) ...
#13 27.58 Setting up fontconfig-config (2.14.1-4) ...
#13 27.65 debconf: unable to initialize frontend: Dialog
#13 27.65 debconf: (TERM is not set, so the dialog frontend is not usable.)
#13 27.65 debconf: falling back to frontend: Readline
#13 27.65 debconf: unable to initialize frontend: Readline
#13 27.65 debconf: (Can't locate Term/ReadLine.pm in @INC (you may need to install the Term::ReadLine module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.36.0 /usr/local/share/perl/5.36.0 /usr/lib/x86_64-linux-gnu/perl5/5.36 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl-base /usr/lib/x86_64-linux-gnu/perl/5.36 /usr/share/perl/5.36 /usr/local/lib/site_perl) at /usr/share/perl5/Debconf/FrontEnd/Readline.pm line 7.)
#13 27.65 debconf: falling back to frontend: Teletype
#13 27.80 Setting up libcdio-paranoia2:amd64 (10.2+2.0.1-1) ...
#13 27.80 Setting up libxcb-glx0:amd64 (1.15-1) ...
#13 27.80 Setting up libedit2:amd64 (3.1-20221030-2) ...
#13 27.81 Setting up libxcb-shape0:amd64 (1.15-1) ...
#13 27.81 Setting up libxcb-shm0:amd64 (1.15-1) ...
#13 27.82 Setting up libldap-2.5-0:amd64 (2.5.13+dfsg-5) ...
#13 27.82 Setting up librist4:amd64 (0.2.7+dfsg-1) ...
#13 27.83 Setting up libxcb-present0:amd64 (1.15-1) ...
#13 27.83 Setting up libthai0:amd64 (0.1.29-1) ...
#13 27.83 Setting up libvorbisfile3:amd64 (1.3.7-1) ...
#13 27.84 Setting up libfreetype6:amd64 (2.12.1+dfsg-5+deb12u4) ...
#13 27.84 Setting up libxcb-sync1:amd64 (1.15-1) ...
#13 27.84 Setting up shared-mime-info (2.2-1) ...
#13 ...

#41 [native-builder 19/23] RUN --mount=type=cache,target=/root/.local/share/pnpm/store,sharing=locked 	pnpm i --frozen-lockfile --aggregate-output
#41 ...

#42 [target-builder 12/12] RUN --mount=type=cache,target=/root/.local/share/pnpm/store,sharing=locked 	pnpm i --frozen-lockfile --aggregate-output
#42 0.681 Scope: all 5 workspace projects
#42 0.894 ? Verifying lockfile against supply-chain policies (2158 entries)...
#42 1.205 
#42 1.205    ╭─────────────────────────────────────────╮
#42 1.205    │                                         │
#42 1.205    │   Update available! 11.5.2 → 12.4.1.    │
#42 1.205    │   Changelog: https://pnpm.io/v/12.4.1   │
#42 1.205    │    To update, run: pnpm add -g pnpm     │
#42 1.205    │                                         │
#42 1.205    ╰─────────────────────────────────────────╯
#42 1.205 
#42 8.201 ✗ Lockfile failed supply-chain policy check (2158 entries in 7.3s)
#42 8.223 [ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION] 1 lockfile entries failed verification:
#42 8.223   @typescript-eslint/types@8.70.0 was published at 2026-09-07T18:15:12.000Z, within the minimumReleaseAge cutoff (2026-09-06T05:21:55.522Z)
#42 8.223 
#42 8.223 The lockfile contains entries that the active policies reject. This can mean the lockfile is stale, or that someone committed a lockfile that bypassed the policy locally — inspect recent changes to pnpm-lock.yaml before trusting it. If the changes look expected, run "pnpm clean --lockfile" and then "pnpm install" to rebuild from a fresh resolution. Alternatively, relax the policy that flagged them.
#42 ERROR: process "/bin/sh -c pnpm i --frozen-lockfile --aggregate-output" did not complete successfully: exit code: 1

#13 [runner  2/17] RUN apt-get update 	&& apt-get install -y --no-install-recommends 	ffmpeg tini curl libjemalloc-dev libjemalloc2 	&& ln -s /usr/lib/$(uname -m)-linux-gnu/libjemalloc.so.2 /usr/local/lib/libjemalloc.so 	&& groupadd -g "991" misskey 	&& useradd -l -u "991" -g "991" -m -d /cherrypick misskey 	&& find / -type d -path /sys -prune -o -type d -path /proc -prune -o -type f -perm /u+s -ignore_readdir_race -exec chmod u-s {} ; 	&& find / -type d -path /sys -prune -o -type d -path /proc -prune -o -type f -perm /g+s -ignore_readdir_race -exec chmod g-s {} ; 	&& apt-get clean 	&& rm -rf /var/lib/apt/lists
#13 CANCELED

#41 [native-builder 19/23] RUN --mount=type=cache,target=/root/.local/share/pnpm/store,sharing=locked 	pnpm i --frozen-lockfile --aggregate-output
#41 12.63 runc run failed: container process is already dead
#41 CANCELED
------
 > [target-builder 12/12] RUN --mount=type=cache,target=/root/.local/share/pnpm/store,sharing=locked 	pnpm i --frozen-lockfile --aggregate-output:
1.205    │   Changelog: https://pnpm.io/v/12.4.1   │
1.205    │    To update, run: pnpm add -g pnpm     │
1.205    │                                         │
1.205    ╰─────────────────────────────────────────╯
1.205 
8.201 ✗ Lockfile failed supply-chain policy check (2158 entries in 7.3s)
8.223 [ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION] 1 lockfile entries failed verification:
8.223   @typescript-eslint/types@8.70.0 was published at 2026-09-07T18:15:12.000Z, within the minimumReleaseAge cutoff (2026-09-06T05:21:55.522Z)
8.223 
8.223 The lockfile contains entries that the active policies reject. This can mean the lockfile is stale, or that someone committed a lockfile that bypassed the policy locally — inspect recent changes to pnpm-lock.yaml before trusting it. If the changes look expected, run "pnpm clean --lockfile" and then "pnpm install" to rebuild from a fresh resolution. Alternatively, relax the policy that flagged them.
------
Dockerfile:69

--------------------

  68 |     

  69 | >>> RUN --mount=type=cache,target=/root/.local/share/pnpm/store,sharing=locked \

  70 | >>> 	pnpm i --frozen-lockfile --aggregate-output

  71 |     

--------------------

failed to solve: process "/bin/sh -c pnpm i --frozen-lockfile --aggregate-output" did not complete successfully: exit code: 1

[github-actions]

このPRによるapi.jsonの差分
差分はありません。
Get diff files from Workflow Page