From fc85c8446be00b708cd54f9ca51f9526a229a289 Mon Sep 17 00:00:00 2001
From: Jan Friedrich <freeandnil@apache.org>
Date: Sun, 16 Aug 2026 21:56:39 +0200
Subject: [PATCH] bump js-yaml override to ^4.3.1 (#308)

Fixes quadratic CPU in !!omap resolution pulled in transitively via Antora.
https://github.com/apache/logging-log4net/security/dependabot/81
---
 package-lock.json | 6 +++---
 package.json      | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 05cb8e97..5e0a4cee 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1141,9 +1141,9 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
-      "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "dev": true,
       "funding": [
         {
diff --git a/package.json b/package.json
index 24fac003..3ac1f1bc 100644
--- a/package.json
+++ b/package.json
@@ -18,6 +18,6 @@
     "@asciidoctor/tabs": "^1.0.0-beta.6"
   },
   "overrides": {
-    "js-yaml": "^4.3.0"
+    "js-yaml": "^4.3.1"
   }
 }