Update yazi to 26.8.15

[gominimal-pkgmgr-mgr]

Update yazi 26.5.6 → 26.8.15

Source: github:sxyazi/yazi
Release: https://github.com/sxyazi/yazi/releases/tag/v26.8.15
Changelog: sxyazi/yazi@v26.5.6...v26.8.15
Released: 2 days ago (2026-08-15)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 26.8.15 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

• 1 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (1)

This update clears 1 vulnerabilities affecting 26.5.6:

CVE / GHSA	Severity	Fixed in
GHSA-9g7f-j48q-ppp9	MEDIUM	via range: <= 26.5.6

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)

	Component	Old	New
~	yazi	26.5.6	26.8.15
~	yazi-upstream	26.5.6	26.8.15

Changes

	Old	New
Version	26.5.6	26.8.15
SHA256	a18445df86a20068...	60bd4ca56398f0f6...
Size	1.1 MB	1.2 MB
Source	gs://minimal-staging-archives/sxyazi/yazi/v26.5.6.tar.gz	gs://minimal-staging-archives/sxyazi/yazi/v26.8.15.tar.gz

• License: MIT (source: GitHub + tarball)

Quality suggestions

• Missing tests block. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a --version or small round-trip invocation) as part of this PR so future bumps catch regressions. See packages/python/build.ncl for a simple example.

---

Created by pkgmgr