chore(deps): bump js-yaml from 3.14.1 to 4.1.0 (#5093)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 4.1.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...4.1.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.changeset/five-dots-matter.md

@@ -0,0 +1,5 @@
+---
+'@talend/scripts-config-cdn': minor
+---
+
+deps: bump js-yaml from 3.x to 4.x

tools/scripts-config-cdn/cdn.js

@@ -15,6 +15,7 @@ const umds = require('./umds.json');
 const { download } = require('./utils');
 
 const CDN_URL = 'https://statics-dev.cloud.talend.com';
+let schema = yaml.DEFAULT_SCHEMA.extend(require('js-yaml-js-types').all);
 
 function getModuleName(nameandversion, isPnpm = false) {
 	if (isPnpm) {
@@ -151,7 +152,7 @@ function getModulesFromLockFile(dir) {
 		try {
 			yarnv1 = lockfile.parse(fs.readFileSync(lockPath, 'utf-8'));
 		} catch (e) {
-			yarnv3 = yaml.load(fs.readFileSync(lockPath, 'utf-8'));
+			yarnv3 = yaml.load(fs.readFileSync(lockPath, 'utf-8'), { schema });
 			// eslint-disable-next-line no-underscore-dangle
 			delete yarnv3.__metadata;
 		}
@@ -166,7 +167,7 @@ function getModulesFromLockFile(dir) {
 			})
 			.map(addLocal);
 	} else if (fs.existsSync(lockTypeMap.pnpm.path)) {
-		const json = yaml.load(fs.readFileSync(lockTypeMap.pnpm.path, 'utf-8'));
+		const json = yaml.load(fs.readFileSync(lockTypeMap.pnpm.path, 'utf-8'), { schema });
 		infos = Object.keys(json.packages)
 			.map(moduleAndversion => {
 				if (moduleAndversion.startsWith('file:')) {

tools/scripts-config-cdn/package.json

@@ -13,7 +13,8 @@
     "@talend/dynamic-cdn-webpack-plugin": "^13.1.0",
     "@talend/module-to-cdn": "^9.10.0",
     "@yarnpkg/lockfile": "^1.1.0",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.1.0",
+    "js-yaml-js-types": "^1.0.1",
     "read-pkg-up": "^7.0.1"
   },
   "devDependencies": {

yarn.lock

@@ -12294,7 +12294,14 @@ js-levenshtein@^1.1.6:
   resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
   integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==
 
-[email protected], js-yaml@^3.13.0, js-yaml@^3.13.1, js-yaml@^3.14.1, js-yaml@^3.6.1:
+js-yaml-js-types@^1.0.1:
+  version "1.0.1"
+  resolved "https://registry.yarnpkg.com/js-yaml-js-types/-/js-yaml-js-types-1.0.1.tgz#fa57135b99d67b3612718426af2d9b314e5c6808"
+  integrity sha512-5tpfyORs8OQ43alNERbWfYRCtWgykvzYgY46fUhrQi2+kS7N0NuuFYLZ/IrfmVm5muLTndeMublgraXiFRjEPw==
+  dependencies:
+    esprima "^4.0.1"
+
+[email protected], js-yaml@^3.13.0, js-yaml@^3.13.1, js-yaml@^3.6.1:
   version "3.14.1"
   resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.14.1.tgz#dae812fdb3825fa306609a8717383c50c36a0537"
   integrity sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==