From f04577d9615bb00f2a4b4c7f80f88622e04fb002 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Sep 2026 10:27:49 +0000
Subject: [PATCH] Bump the npm-dependencies group with 2 updates

Bumps the npm-dependencies group with 2 updates: [js-yaml](https://github.com/nodeca/js-yaml) and [picomatch](https://github.com/micromatch/picomatch).


Updates `js-yaml` from 5.3.0 to 5.4.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.3.0...5.4.0)

Updates `picomatch` from 4.0.5 to 4.0.7
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.5...4.0.7)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: picomatch
  dependency-version: 4.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 16 ++++++++--------
 package.json      |  4 ++--
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index b84a6aa..8ab4441 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,14 +17,14 @@
         "is-extglob": "^2.1.1",
         "is-glob": "^4.0.3",
         "jiti": "^2.7.0",
-        "js-yaml": "^5.3.0",
+        "js-yaml": "^5.4.0",
         "lightningcss": "^1.33.0",
         "magic-string": "^1.2.2",
         "mri": "^1.2.0",
         "node-addon-api": "^8.9.2",
         "phaser": "^4.2.1",
         "picocolors": "^1.1.1",
-        "picomatch": "^4.0.5",
+        "picomatch": "^4.0.7",
         "postcss": "^8.5.26",
         "source-map-js": "^1.2.1",
         "tailwindcss": "^4.2.2",
@@ -3369,9 +3369,9 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "5.3.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.3.0.tgz",
-      "integrity": "sha512-muutsYr+e2+d3rTgUGslq5rxbBlUy3cJ61IsHag2QNDQV+7zXWjkUpmALIajhrlLlrgRUiymj6U3zUr/TMK84Q==",
+      "version": "5.4.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.0.tgz",
+      "integrity": "sha512-jE7vUJIebKzYQI5xu4co5CRBDlDEYnHrdzsxs4O2giCz4v2SbVMYKpmt1D9L38OKQAeCWmrOTRiCV93u0UkaJA==",
       "funding": [
         {
           "type": "github",
@@ -4254,9 +4254,9 @@
       "license": "ISC"
     },
     "node_modules/picomatch": {
-      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz",
-      "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==",
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
       "license": "MIT",
       "engines": {
         "node": ">=12"
diff --git a/package.json b/package.json
index a39bd2a..8124665 100644
--- a/package.json
+++ b/package.json
@@ -12,14 +12,14 @@
     "is-extglob": "^2.1.1",
     "is-glob": "^4.0.3",
     "jiti": "^2.7.0",
-    "js-yaml": "^5.3.0",
+    "js-yaml": "^5.4.0",
     "lightningcss": "^1.33.0",
     "magic-string": "^1.2.2",
     "mri": "^1.2.0",
     "node-addon-api": "^8.9.2",
     "phaser": "^4.2.1",
     "picocolors": "^1.1.1",
-    "picomatch": "^4.0.5",
+    "picomatch": "^4.0.7",
     "postcss": "^8.5.26",
     "source-map-js": "^1.2.1",
     "tailwindcss": "^4.2.2",