Bump js-yaml and @angular-devkit/build-angular

[dependabot]

Bumps js-yaml to 4.3.2 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates js-yaml from 3.14.2 to 4.3.2

Changelog

Sourced from js-yaml's changelog.

4.3.2 - 2026-08-26

Changed

• [backport] Hard-limit merge sequence size to 100.

Security

• [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

4.3.1 - 2026-07-31

Security

• [backport] Remove quadratic complexity from !!omap duplicate key detection.

4.3.0 - 2026-06-27

Added

• [backport] Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.

Fixed

• Restore umd builds back to es5.

Removed

• [backport] maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

[4.2.0] - 2026-06-01

Added

• Added docs/safety.md with notes about processing untrusted YAML.
• Added maxDepth (100) loader option. Not a problem, but gives a better exception instead of RangeError on stack overflow.
• Added maxMergeSeqLength (20) loader option. Not a problem after merge fix, but an additional restriction for safety.
• Added sourcemaps to dist/ builds.

Changed

• Stop resolving numbers with underscores as numeric scalars, #627.
• Switched dev toolchains to Vite / neostandard.
• Updated demo.
• Reorganized tests.
• dist/ files are no longer kept in the repository.

Fixed

• Fix parsing of properties on the first implicit block mapping key, #62.
• Fix trailing whitespace handling when folding flow scalar lines, #307.
• Reject top-level block scalars without content indentation, #280.
• Ensure numbers survive round-trip, #737.
• Fix test coverage for issue #221.
• Fix flow scalar trailing whitespace folding, #307.

... (truncated)

Commits

• 79ca68d 4.3.2 released
• d90b661 Backport merge limits from v5.4.1
• 86e91b8 4.3.1 released
• c3cc4b0 Backport quadratic complexity fix for !!omap
• 33d05b5 4.3.0 released
• 663bfab Drop demo publish, to not override new v5 one.
• 1cb8c7b Add v4-legacy tag for publish
• 02f27af Restore umd builds back to es5
• 8be84ed Fix es5 compatibility
• 59423c6 Replace maxMergeSeqLength option with maxTotalMergeKeys (more robust). Ba...
• Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 17.0.5 to 21.2.23

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.23

@​angular-devkit/build-angular

Commit	Description
	update less to 4.9.0

@​angular/ssr

Commit	Description
	ensure public directory containment in CommonEngine

21.2.22

@​angular-devkit/build-angular

Commit	Description
	update webpack-dev-server to 5.2.6

21.2.21

@​angular/cli

Commit	Description
	update dependency @​modelcontextprotocol/sdk to v1.30.0

@​angular/build

Commit	Description
	bump undici to 7.29.0

21.2.20

@​angular-devkit/build-angular

Commit	Description
	upgrade postcss to 8.5.23

@​angular/build

Commit	Description
	upgrade postcss to 8.5.23

21.2.19

@​angular-devkit/build-angular

Commit	Description
	update http-proxy-middleware to 3.0.7

21.2.18

@​angular/cli

Commit	Description
	respect release age policy in update bootstrapping logic

@​angular/build

Commit	Description

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.23 (2026-09-02)

@​angular-devkit/build-angular

Commit	Type	Description
d3aaa48ef	fix	update less to 4.9.0

@​angular/ssr

Commit	Type	Description
645e41a47	fix	ensure public directory containment in CommonEngine

20.3.36 (2026-09-02)

@​angular-devkit/build-angular

Commit	Type	Description
b4059cdc7	fix	update less to 4.9.0

@​angular/ssr

Commit	Type	Description
c3e5982e4	fix	ensure public directory containment in CommonEngine

22.2.0-next.5 (2026-08-26)

@​angular/build

Commit	Type	Description
4d0be683b7	fix	ignore side-effect annotations in unit test builds
e4111ae818	fix	prevent memory leaks in parallel compilation and caches
62999cabf4	perf	batch prerender routes and share in-memory server bundles
0589edd9cd	perf	consolidate component stylesheet bundling with shared load result cache
a877aa7ebd	perf	implement SharedArrayBuffer translation dictionaries for zero-copy worker access
f1cc959439	perf	implement sliding-window batching and worker translation eviction
f4dad31cce	perf	unify Oxc linking and optimization AST traversal passes

... (truncated)

Commits

• e2582bb release: cut the v21.2.23 release
• 645e41a fix(@​angular/ssr): ensure public directory containment in CommonEngine
• d3aaa48 fix(@​angular-devkit/build-angular): update less to 4.9.0
• 60dee48 release: cut the v21.2.22 release
• b0047b0 fix(@​angular-devkit/build-angular): update webpack-dev-server to 5.2.6
• 90e8059 release: cut the v21.2.21 release
• f7f60e6 fix(@​angular/build): bump undici to 7.29.0
• ba5d16c fix(@​angular/cli): update dependency @​modelcontextprotocol/sdk to v1.30.0
• 928eb73 release: cut the v21.2.20 release
• 972f6db fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.23
• Additional commits viewable in compare view