From bdf5e85a16dcafc207c5f8acd425a635402fc3ae Mon Sep 17 00:00:00 2001 From: Muhammad Farhan Tahir <39334336+MuhammadFarhantahir@users.noreply.github.com> Date: Sun, 19 Jul 2026 00:22:43 +0500 Subject: [PATCH] fix: repin js-yaml to 4.2.0, 4.3.0 is gone from npm and breaks install npm install pm2 (7.0.2 / 7.0.3) fails with ETARGET because the exact-pinned js-yaml@4.3.0 no longer exists on the registry; the newest published version is 4.2.0, which is also the release GHSA-h67p-54hq-rp68 called for (#6122). Co-Authored-By: Claude Fable 5 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index b694f2dc1..4d8c17107 100644 --- a/package.json +++ b/package.json @@ -137,7 +137,7 @@ "debug": "4.4.3", "eventemitter2": "6.4.9", "fast-json-patch": "3.1.1", - "js-yaml": "4.3.0", + "js-yaml": "4.2.0", "pidusage": "4.0.1", "pm2-deploy": "1.0.2", "proxy-agent": "6.5.0",