Bump js-yaml and mocha

[dependabot]

Bumps js-yaml to 3.14.2 and updates ancestor dependency mocha. These dependencies need to be updated together.

Updates js-yaml from 3.14.0 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[3.14.2] - 2025-11-15

Security

• Backported v4.1.1 fix to v3

[4.1.1] - 2025-11-12

Security

• Fix prototype pollution issue in yaml merge (<<) operator.

[4.1.0] - 2021-04-15

Added

• Types are now exported as yaml.types.XXX.
• Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

• Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

[4.0.0] - 2021-01-03

Changed

• Check migration guide to see details for all breaking changes.
• Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are moved to js-yaml-js-types package.
• Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.
• yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use yaml.DEFAULT_SCHEMA instead.
• yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.
• !!binary now always mapped to Uint8Array on load.
• Reduced nesting of /lib folder.
• Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal, 0o1234 is octal, 1:23 is parsed as string instead of base60).
• dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.
• Line and column in exceptions are now formatted as (X:Y) instead of at line X, column Y (also present in compact format), #332.
• Code snippet created in exceptions now contains multiple lines with line numbers.
• dump() now serializes undefined as null in collections and removes keys with undefined in mappings, #571.
• dump() with skipInvalid=true now serializes invalid items in collections as null.
• Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.
• Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.

Added

• Added .mjs (es modules) support.
• Added quotingType and forceQuotes options for dumper to configure string literal style, #290, #529.
• Added styles: { '!!null': 'empty' } option for dumper (serializes { foo: null } as "foo: "), #570.

... (truncated)

Commits

• 9963d36 3.14.2 released
• 10d3c8e dist rebuild
• 5278870 fix prototype pollution in merge (<<) (#731)
• 37caaad 3.14.1 released
• 094c0f7 dist rebuild
• 9586ebe Avoid calling hasOwnProperty of user-controlled objects
• See full diff in compare view

Updates mocha from 8.2.1 to 8.4.0

Release notes

Sourced from mocha's releases.

v8.4.0

8.4.0 / 2021-05-07

🎉 Enhancements

• #4502: CLI file parsing errors now have error codes (@​evaline-ju)

🐛 Fixes

• #4614: Watch: fix crash when reloading files (@​outsideris)

📖 Documentation

• #4630: Add options.require to Mocha constructor for root hook plugins on parallel runs (@​juergba)
• #4617: Dynamically generating tests with top-level await and ESM test files (@​juergba)
• #4608: Update default file extensions (@​outsideris)

Also thanks to @​outsideris for various improvements on our GH actions workflows.

v8.3.2

8.3.2 / 2021-03-12

🐛 Fixes

• #4599: Fix regression in require interface (@​alexander-fenster)

📖 Documentation

• #4601: Add build to GH actions run (@​christian-bromann)
• #4596: Filter active sponsors/backers (@​juergba)
• #4225: Update config file examples (@​pkuczynski)

v8.3.1

8.3.1 / 2021-03-06

🐛 Fixes

• #4577: Browser: fix EvalError caused by regenerator-runtime (@​snoack)
• #4574: ESM: allow import from mocha in parallel mode (@​nicojs)

v8.3.0

8.3.0 / 2021-02-11

🎉 Enhancements

• #4506: Add error code for test timeout errors (@​boneskull)
• #4112: Add BigInt support to stringify util function (@​JosejeSinohui)

🐛 Fixes

... (truncated)

Changelog

Sourced from mocha's changelog.

8.4.0 / 2021-05-07

🎉 Enhancements

• #4502: CLI file parsing errors now have error codes (@​evaline-ju)

🐛 Fixes

• #4614: Watch: fix crash when reloading files (@​outsideris)

📖 Documentation

• #4630: Add options.require to Mocha constructor for root hook plugins on parallel runs (@​juergba)
• #4617: Dynamically generating tests with top-level await and ESM test files (@​juergba)
• #4608: Update default file extensions (@​outsideris)

Also thanks to @​outsideris for various improvements on our GH actions workflows.

8.3.2 / 2021-03-12

🐛 Fixes

• #4599: Fix regression in require interface (@​alexander-fenster)

📖 Documentation

• #4601: Add build to GH actions run (@​christian-bromann)
• #4596: Filter active sponsors/backers (@​juergba)
• #4225: Update config file examples (@​pkuczynski)

8.3.1 / 2021-03-06

🐛 Fixes

• #4577: Browser: fix EvalError caused by regenerator-runtime (@​snoack)
• #4574: ESM: allow import from mocha in parallel mode (@​nicojs)

8.3.0 / 2021-02-11

🎉 Enhancements

• #4506: Add error code for test timeout errors (@​boneskull)
• #4112: Add BigInt support to stringify util function (@​JosejeSinohui)

🐛 Fixes

• #4557: Add file location when SyntaxError happens in ESM (@​giltayar)
• #4521: Fix require error when bundling Mocha with Webpack (@​devhazem)

📖 Documentation

... (truncated)

Commits

• 5064c28 Release v8.4.0
• 9cbcc8b update CHANGELOG for v8.4.0 [ci skip]
• 0079ae7 Change CLI file parsing errors to use an error code (#4502)
• d35eb9d docs: add "options.require" to Mocha constructor (#4630) [ci skip]
• 908aa05 GH actions: add Node v16 (#4629)
• 8285910 Watch for test files are crashed (#4614)
• 34643e4 Run browser tests on forked PRs by a dedicated label (#4616)
• 8a2da76 docs: dynamic tests with top-level await (#4617) [ci skip]
• d7ed5c2 Remove unused test.retries(n) (#4611)
• a41f18a GH actions: stale workflow (#4613) [ci skip]
• Additional commits viewable in compare view

[MoOx]

@dependabot rebase