[Deps] Safe dependency updates ()

[github-actions]

Automated Safe Dependency Updates

This PR contains safe patch-level dependency updates verified to:

• ✅ Pass all tests (no new failures introduced)
• ✅ Have no breaking changes
• ✅ Address no outstanding npm audit vulnerabilities (none found)

Updated Dependencies

Package	Previous	Updated	Type
js-yaml	4.3.0	4.3.1	patch

Security Fixes Included

None required — npm audit reported 0 vulnerabilities at time of run. This is a routine patch-level bump.

Verification

• npm audit shows 0 vulnerabilities
• npm test run before and after the change shows the same 55 pre-existing failures (unrelated environment/permission issues with bounded-query ingress tests, not caused by this update) and 4901 passing tests in both cases
• No breaking changes (patch version bump only)

Notes

Other outdated packages (execa, commander, chalk, typescript, @types/node, etc.) have available updates but are minor/major version bumps with potential breaking changes, so they were intentionally excluded from this safe-update batch.

---

Generated by Dependency Security Monitor Workflow

---

Warning

Protected Files — Push Permission Denied

This was originally intended as a pull request, but the patch modifies protected files. A human must create the pull request manually.

Protected files

• package-lock.json

• package.json

The push was rejected because GitHub Actions does not have workflows permission to push these changes, and is never allowed to make such changes, or other authorization being used does not have this permission.

Create the pull request manually

# Download the patch from the workflow run
gh run download 30682629006 -n agent -D /tmp/agent-30682629006

# Create a new branch
git checkout -b deps/safe-update-20260801-91c4291515ff8450 main

# Apply the patch (--3way handles cross-repo patches)
git am --3way /tmp/agent-30682629006/aw-deps-safe-update-20260801.patch

# Push the branch and create the pull request
git push origin deps/safe-update-20260801-91c4291515ff8450
gh pr create --title '[Deps] Safe dependency updates ()' --base main --head deps/safe-update-20260801-91c4291515ff8450 --repo github/gh-aw-firewall

Generated by Dependency Security Monitor · aut00 · 29 AIC · ⊞ 12.5K · ◷