From e387a0df25c8490f48e92fe0c5a38557bb048aa5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 11 Aug 2026 17:01:06 +0000
Subject: [PATCH] Bump js-yaml and cfenv

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.3.1 and updates ancestor dependency [cfenv](https://github.com/cloudfoundry-community/node-cfenv). These dependencies need to be updated together.


Updates `js-yaml` from 4.1.1 to 4.3.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.1...4.3.1)

Updates `cfenv` from 1.2.6 to 1.2.7
- [Commits](https://github.com/cloudfoundry-community/node-cfenv/commits)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: indirect
- dependency-name: cfenv
  dependency-version: 1.2.7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 30 ++++++++++++++++++++----------
 package.json      |  2 +-
 2 files changed, 21 insertions(+), 11 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 58c7755..27bff60 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "license": "Apache-2.0",
       "dependencies": {
         "@cloudant/cloudant": "1.10.0",
-        "cfenv": "1.2.6",
+        "cfenv": "1.2.7",
         "express": "4.22.2",
         "font-awesome": "4.7.0",
         "hbs": "4.2.1"
@@ -235,14 +235,14 @@
       "integrity": "sha1-G2gcIf+EAzyCZUMJBolCDRhxUdw="
     },
     "node_modules/cfenv": {
-      "version": "1.2.6",
-      "resolved": "https://registry.npmjs.org/cfenv/-/cfenv-1.2.6.tgz",
-      "integrity": "sha512-nx+bbEvpzWTuASn2Xy64n8oDkhgK4Z+dHhG51RNsPH66vCU08cPiLyRrxJh9ukjtK3AGbVc15NSAMMMrO1rGQg==",
+      "version": "1.2.7",
+      "resolved": "https://registry.npmjs.org/cfenv/-/cfenv-1.2.7.tgz",
+      "integrity": "sha512-yG340+s4lHMKI3CVDTi4JL4/hV3XPOF7cru7k9XIYCU8Z6gg7VqOUv7XSp4xr9p8nDS+8xmJgGC02RliYk7QOw==",
       "license": "Apache-2.0",
       "dependencies": {
-        "js-yaml": "4.1.x",
-        "ports": "1.1.x",
-        "underscore": "1.13.x"
+        "js-yaml": "^4.3.0",
+        "ports": "^1.1.0",
+        "underscore": "^1.13.8"
       }
     },
     "node_modules/cloudant-follow": {
@@ -845,9 +845,19 @@
       "integrity": "sha1-R+Y/evVa+m+S4VAOaQ64uFKcCZo="
     },
     "node_modules/js-yaml": {
-      "version": "4.1.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
-      "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
       "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
diff --git a/package.json b/package.json
index ba85b5f..d30009f 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@cloudant/cloudant": "1.10.0",
-    "cfenv": "1.2.6",
+    "cfenv": "1.2.7",
     "express": "4.22.2",
     "font-awesome": "4.7.0",
     "hbs": "4.2.1"