From 7839e52ec719e42b0defbeb19b926e711383a72d Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 10 Jul 2026 07:02:18 +0000
Subject: [PATCH] fix: packages/editor/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-JSYAML-17900054
- https://snyk.io/vuln/SNYK-JS-TAR-17909068
- https://snyk.io/vuln/SNYK-JS-TAR-17909152
---
 packages/editor/package.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/editor/package.json b/packages/editor/package.json
index 68e876097..f29f17cc4 100644
--- a/packages/editor/package.json
+++ b/packages/editor/package.json
@@ -15,12 +15,12 @@
     "editor-types": "*",
     "fuse.js": "^6.4.6",
     "jayson": "^4.0.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.0",
     "lodash.debounce": "^4.0.8",
     "lodash.orderby": "^4.6.0",
     "lodash.uniqby": "^4.7.0",
     "orderedmap": "^1.0.0",
-    "pinyin": "^2.10.2",
+    "pinyin": "^4.0.0",
     "prosemirror-changeset": "^2.2.0",
     "prosemirror-commands": "^1.3.1",
     "prosemirror-dev-tools": "^3.1.0",