Sourced from js-yaml's changelog.
4.3.2 - 2026-08-26
Changed
- [backport] Hard-limit merge sequence size to 100.
Security
- [backport] Count empty mappings in merge sequences toward
maxTotalMergeKeysto limit CPU usage, #797.
79ca68d
4.3.2 releasedd90b661
Backport merge limits from v5.4.1