[dependabot]

Bumps go.yaml.in/yaml/v4 from 4.0.0-rc.9 to 4.0.0.

Release notes

Sourced from go.yaml.in/yaml/v4's releases.

go-yaml v4.0.0

go-yaml v4.0.0 is the first stable release of the v4 series, maintained by the YAML organization. It adds configurable loading and dumping, public plugin interfaces, structured errors, and a CLI for inspecting YAML processing. The classic APIs remain supported, so applications can adopt v4 incrementally.

Getting started

Install the release:

go get go.yaml.in/yaml/v4@v4.0.0

Use this import path in your Go code:

import "go.yaml.in/yaml/v4"

For an existing v3 application, start by updating imports, reviewing custom unmarshalers, and running your tests. You can continue using Unmarshal, Marshal, NewDecoder, and NewEncoder. The v2 and v3 APIs remain frozen, with security fixes only; new features and routine bug fixes are developed in v4.

Why add Load and Dump?

Applications need different YAML policies: strict configuration validation, particular output layouts, or custom anchor handling. The new Load and Dump functions and streaming Loader and Dumper accept functional options and plugins for those choices. They use YAML's load/dump terminology and are recommended for new code.

The classic entry points keep compatibility settings rather than changing formatting and error presentation for every existing caller. Moving to the new API is an explicit choice to use v4 defaults, with presets available when you want older settings. Classic APIs remain supported.

For example, load a configuration with strict field checking, then choose its output indentation:

package main
import (
"fmt"
</tr></table>

... (truncated)

Commits

• f2f9563 Add a target for GitHub release drafts
• f154859 Add release notes for go-yaml v4.0.0
• dcd0fa5 Prepare documentation for the v4 release
• abc9fb0 Remove deprecated Limit plugin API
• 3fefab0 Compare YTS JSON numbers as float64
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)