From de70bc156ca29b79632737f536751286e77ab4c1 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Aug 2026 10:49:26 +0000
Subject: [PATCH] fix(deps): update dependency js-yaml to v4 [security]

---
 packages/commands/init/package.json | 2 +-
 yarn.lock                           | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/commands/init/package.json b/packages/commands/init/package.json
index 8a9f872b8..2769a0c83 100644
--- a/packages/commands/init/package.json
+++ b/packages/commands/init/package.json
@@ -29,7 +29,7 @@
     "fullname": "^4.0.1",
     "graphql": "^15.5.0",
     "inquirer": "7.3.3",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "latest-version": "^5.1.0",
     "openapi-to-graphql": "^2.2.6",
     "ora": "^5.3.0",
diff --git a/yarn.lock b/yarn.lock
index 168f7d18b..a1e528fcf 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -9748,7 +9748,7 @@ js-string-escape@^1.0.1:
   resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
   integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==
 
-js-yaml@^3.13.1, js-yaml@^3.14.0, js-yaml@^3.14.1:
+js-yaml@^3.13.1, js-yaml@^3.14.0:
   version "3.14.1"
   resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.14.1.tgz#dae812fdb3825fa306609a8717383c50c36a0537"
   integrity sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==