Skip to content

chore(deps): bump yaml from 3.1.3 to 3.1.4 - #1190

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pub/yaml-3.1.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pub/yaml-3.1.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026 •

Copy link
Copy Markdown
Contributor

Bumps yaml from 3.1.3 to 3.1.4.

Release notes

Sourced from yaml's releases.

package:yaml v3.1.4

  • Improve recovery for list entries without - prefix. When recovering, provide a more helpful error message suggesting the missing prefix.
  • Fix a bug where block strings terminated by EOF were not given an implicit newline.
  • Fix parsing of plain scalars starting with indicator characters (?, :, and -).
  • Throw a FormatException when parsing self-referential collections instead of a StackOverflow. Yaml definitions with collections nested within themselves are unsupported.
Commits
  • c7f7a63 Prepare to publish packages (#2562)
  • 3b3b22c [extension_discovery] Fixup review comments (#2557)
  • 441ff29 [unified_analytics]Add an 'is_external' const to indicate external builds (#2...
  • 5f02a37 Fix trailing comma when adding to flow collections in yaml_edit (#2533)
  • 7a3be9a [unified_analytics] Prepare for 8.0.18 release (#2559)
  • 59c163c [unified_analytics] Add hostArch parameter to Event.flutterCommandResult (#2558)
  • 8108a7c [extension_discovery] Prevent config.yaml symlinks from escaping package boun...
  • 3de16a5 fix(coverage): reject file: URIs outside known roots in Resolver (#2534)
  • 1723b1e [html]: add minimal differential testing framework (#2554)
  • 7dc3279 fix: reconcile version mismatches in process and stack_trace (#2546)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [yaml](https://github.com/dart-lang/tools/tree/main/pkgs) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/dart-lang/tools/releases)
- [Commits](https://github.com/dart-lang/tools/commits/yaml-v3.1.4/pkgs)

---
updated-dependencies:
- dependency-name: yaml
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dart Pull requests that update dart code dependencies Pull requests that update a dependency file labels Sep 3, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dart Pull requests that update dart code labels Sep 3, 2026

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Devin Review

cloudwebrtc added a commit that referenced this pull request Nov 9, 2026
…y DD

Brings the single peer connection path in line with client-sdk-js:

- Track sid by mid: keep the server's mid_to_track_id (from the publisher
  answer in single PC mode when non-empty, from the subscriber offer in dual
  PC), and resolve a receiving track whose id is not a TR_ sid through its
  transceiver's mid. On a single PC the recvonly track id is generated
  locally; today's servers also put the sid in the msid stream id, so this is
  the fallback for when they do not (js #1696, #2089, #2090).
- Remove the inactive -> recvonly munge. The SDK never asks for
  offerToReceive, and the rewrite turned a stopped transceiver's section back
  into recvonly after an unpublish (swift #1190, rust #1610).
- v1 validate URL is the signal URL plus /validate, join_request included.
  Without it the server answers 400 for a valid token and a failed connect was
  reported as NotAllowed.
- Number publisher offers (SessionDescription.id), drop answers to an older
  offer and numbered duplicates, echo the id in subscriber answers, and do not
  set or send an offer that a newer one superseded (js #2196).
- Negotiate the dependency descriptor on recvonly video sections in single PC
  mode, with one extension id for the whole bundle (js #2053).

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dart Pull requests that update dart code dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants