unstale

npm / yaml

yaml

What changed in yaml 2, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-17.

1 breaking1 security1 new APIs and options1 behavior and defaults7 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.1.1 on npm

yaml 211 changes

Breaking changes 1

  • Recursive merge aliases are limited, changing how YAML documents with recursive merge aliases are handled.

    2.9.1release notes

Security 1

  • yaml is vulnerable to Stack Overflow via deeply nested YAML collections

    2.8.3security advisory

New APIs and options 1

  • Adds the trailingComma option for multiline flow formatting.

    2.8.3release notes

Behavior and default changes 1

  • Setting maxAliasCount to 0 disables alias resolution.

    2.8.4release notes

Fixes and other changes 7

  • Avoids calling Array.prototype.push.apply() with a large source array.

    2.9.0release notes

  • Avoids recursive lexer calls that may exhaust the call stack.

    2.9.0release notes

  • Invalid unicode escapes are now handled.

    2.8.4release notes

  • minFractionDigits is applied only to decimal strings.

    2.8.4release notes

  • Catches stack overflows during node composition.

    2.8.3release notes

  • Empty map values are no longer serialized with double newlines.

    2.8.2release notes

  • Serialization preserves -0 as -0.

    2.8.2release notes