Bump js-yaml, @antora/cli and @antora/site-generator-default

[dependabot]

Bumps js-yaml to 5.4.1 and updates ancestor dependencies js-yaml, @antora/cli and @antora/site-generator-default. These dependencies need to be updated together.

Updates js-yaml from 4.1.0 to 5.4.1

Changelog

Sourced from js-yaml's changelog.

[5.4.1] - 2026-08-26

Changed

• Hard-limit merge sequence size to 100.

Security

• Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

• Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

• [breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.
• [breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.
• Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

• Accept a byte order mark at the start of each document in a stream, #791.
• Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.
• Preserve empty scalar items when converting block sequences to flow style.
• Do not apply the 1024-character simple-key limit to flow mapping keys.
• Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.
• Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

[5.3.0] - 2026-08-14

This release focuses on reworking the documentation and making small architectural improvements before moving forward.

Added

• Added completely new documentation.
• Exported DUMP_SCHEMA, the default schema used by the dumper.
• Added YAMLException.throwAt() for throwing an error at a source position.

Changed

... (truncated)

Commits

• e5a3ba0 5.4.1 released
• e54dea3 Hard-limit merge sequence size to 100
• dfd3a29 Cleanup 6a8e05f, #797
• 6a8e05f fix: count empty merge sources against maxTotalMergeKeys (#797)
• 6b4ff5e 5.4.0 released
• 3b3625e Update changelog
• 4f25a74 Fix file name
• 3bd003b Expose new scalar styling API
• fbb3e9d Remove regex lookbehind for ES2015 compatibility
• d43c185 Fix flowSkipColonSpace by forcing quoteFlowKeys
• Additional commits viewable in compare view

Updates @antora/cli from 3.2.0-alpha.9 to 3.2.0

Changelog

Sourced from @​antora/cli's changelog.

== 3.2.0 (2026-08-29)

=== Changed

• site-generator: Log original error message when Antora extension is suspected to be Asciidoctor extension
• Upgrade js-yaml to 5.3.x (playbook-builder, content-aggregator, ui-loader)

=== Fixed

• Don't crash if pub property not set on start page

== 3.2.0-rc.3 (2026-08-12)

=== Added

• playbook-builder: Add antoraVersion property to playbook to provide access to Antora core version (#1236)
• content-classifier: Modify ContentCatalog#getComponentVersion to return latest component version if version is unspecified (#1231)
• asciidoc-loader: Pass standalone option through to Asciidoctor#load API (#1228)
• asciidoc-loader: Add antoraResourceRefs option to control whether Antora resource ref integration is enabled; pass through safe, docfile, and docdir options as well (#1241)
• file-publisher: Update publishFiles to accept an array of files as alternative to array of catalogs (#1235)

=== Changed

• logger: Use src.abspath (absolute path) as file path in log message, if available, even if origin is not set
• playbook-builder: Allow collection keys (array or map) in playbook to be null (#1233)
• playbook-builder: Map --stacktrace CLI option to runtime.stacktrace property on playbook (#1227)
• content-classifier: Change createFile method to set module property to ROOT if not set when inflating src
• content-classifier: Change createFile method to compute and assign path property if not set if input is not a Vinyl instance
• asciidoc-loader: Always prefix docname with family segment if family is not page (#1232)
• navigation-builder: Assign pathname property to navigation entry with internal url when url has a hash (i.e., fragment) (#1237)
• file-publisher: Don't output site if output dir is null; still allow destinations to be null (#1234)
• file-publisher: Only allow primary output dir to set path for fs destination if first entry and path key is not set (#1238)
• file-publisher: Honor empty output destinations; require entry for primary fs destination if destinations key is set (#1240)
• cli: Pass --stacktrace argument to buildPlaybook (#1227)

=== Fixed

• playbook-builder: Don't crash when coercing CLI option value if target collection is null; related to #1233
• file-publisher: Honor clean: false set on output destination when default clean value is true

== 3.2.0-rc.2 (2026-06-20)

=== Added

• content-classifier: Add create argument as second argument to addFile method on content catalog for backwards compatibility; default to true

=== Changed

• content-classifier: Convert contents to Buffer if contents is string for file passed to createFile method on content catalog; only used if input file is not a Vinyl object (#1226)

... (truncated)

Commits

• 85665d0 release 3.2.0
• 79f23d7 add Node.js 26 to test matrix
• 04c952a upgrade xmldom
• 4b923ed update declared supported versions of Node.js
• ecc28eb update release date on what's new page
• 03b788c add missing entries from what's new page
• 058f436 apply pending formatting to example code
• 9452cca upgrade js-yaml
• 621fe93 refresh dependency lock file
• 57a244e remove unused images
• Additional commits viewable in compare view

Updates @antora/site-generator-default from 3.2.0-alpha.9 to 3.2.0

Changelog

Sourced from @​antora/site-generator-default's changelog.

== 3.2.0 (2026-08-29)

=== Changed

• site-generator: Log original error message when Antora extension is suspected to be Asciidoctor extension
• Upgrade js-yaml to 5.3.x (playbook-builder, content-aggregator, ui-loader)

=== Fixed

• Don't crash if pub property not set on start page

== 3.2.0-rc.3 (2026-08-12)

=== Added

• playbook-builder: Add antoraVersion property to playbook to provide access to Antora core version (#1236)
• content-classifier: Modify ContentCatalog#getComponentVersion to return latest component version if version is unspecified (#1231)
• asciidoc-loader: Pass standalone option through to Asciidoctor#load API (#1228)
• asciidoc-loader: Add antoraResourceRefs option to control whether Antora resource ref integration is enabled; pass through safe, docfile, and docdir options as well (#1241)
• file-publisher: Update publishFiles to accept an array of files as alternative to array of catalogs (#1235)

=== Changed

• logger: Use src.abspath (absolute path) as file path in log message, if available, even if origin is not set
• playbook-builder: Allow collection keys (array or map) in playbook to be null (#1233)
• playbook-builder: Map --stacktrace CLI option to runtime.stacktrace property on playbook (#1227)
• content-classifier: Change createFile method to set module property to ROOT if not set when inflating src
• content-classifier: Change createFile method to compute and assign path property if not set if input is not a Vinyl instance
• asciidoc-loader: Always prefix docname with family segment if family is not page (#1232)
• navigation-builder: Assign pathname property to navigation entry with internal url when url has a hash (i.e., fragment) (#1237)
• file-publisher: Don't output site if output dir is null; still allow destinations to be null (#1234)
• file-publisher: Only allow primary output dir to set path for fs destination if first entry and path key is not set (#1238)
• file-publisher: Honor empty output destinations; require entry for primary fs destination if destinations key is set (#1240)
• cli: Pass --stacktrace argument to buildPlaybook (#1227)

=== Fixed

• playbook-builder: Don't crash when coercing CLI option value if target collection is null; related to #1233
• file-publisher: Honor clean: false set on output destination when default clean value is true

== 3.2.0-rc.2 (2026-06-20)

=== Added

• content-classifier: Add create argument as second argument to addFile method on content catalog for backwards compatibility; default to true

=== Changed

• content-classifier: Convert contents to Buffer if contents is string for file passed to createFile method on content catalog; only used if input file is not a Vinyl object (#1226)

... (truncated)

Commits

• 85665d0 release 3.2.0
• 79f23d7 add Node.js 26 to test matrix
• 04c952a upgrade xmldom
• 4b923ed update declared supported versions of Node.js
• ecc28eb update release date on what's new page
• 03b788c add missing entries from what's new page
• 058f436 apply pending formatting to example code
• 9452cca upgrade js-yaml
• 621fe93 refresh dependency lock file
• 57a244e remove unused images
• Additional commits viewable in compare view

[ramanathan1504]

@dependabot recreate