Upgrade js-yaml to 4.X (#3623)

src/common/k8s-api/endpoints/helm-releases.api.ts

@@ -19,7 +19,7 @@
  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  */
 
-import jsYaml from "js-yaml";
+import yaml from "js-yaml";
 import { autoBind, formatDuration } from "../../utils";
 import capitalize from "lodash/capitalize";
 import { apiBase } from "../index";
@@ -113,21 +113,31 @@ export async function getRelease(name: string, namespace: string): Promise<IRele
 }
 
 export async function createRelease(payload: IReleaseCreatePayload): Promise<IReleaseUpdateDetails> {
-  const { repo, ...data } = payload;
+  const { repo, chart: rawChart, values: rawValues, ...data } = payload;
+  const chart = `${repo}/${rawChart}`;
+  const values = yaml.load(rawValues);
 
-  data.chart = `${repo}/${data.chart}`;
-  data.values = jsYaml.safeLoad(data.values);
-
-  return apiBase.post(endpoint(), { data });
+  return apiBase.post(endpoint(), {
+    data: {
+      chart,
+      values,
+      ...data,
+    }
+  });
 }
 
 export async function updateRelease(name: string, namespace: string, payload: IReleaseUpdatePayload): Promise<IReleaseUpdateDetails> {
-  const { repo, ...data } = payload;
+  const { repo, chart: rawChart, values: rawValues, ...data } = payload;
+  const chart = `${repo}/${rawChart}`;
+  const values = yaml.load(rawValues);
 
-  data.chart = `${repo}/${data.chart}`;
-  data.values = jsYaml.safeLoad(data.values);
-
-  return apiBase.put(endpoint({ name, namespace }), { data });
+  return apiBase.put(endpoint({ name, namespace }), {
+    data: {
+      chart,
+      values,
+      ...data,
+    }
+  });
 }
 
 export async function deleteRelease(name: string, namespace: string): Promise<JsonApiData> {

src/common/k8s-api/endpoints/resource-applier.api.ts

@@ -19,7 +19,7 @@
  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  */
 
-import jsYaml from "js-yaml";
+import yaml from "js-yaml";
 import type { KubeJsonApiData } from "../kube-json-api";
 import { apiBase } from "../index";
 import type { Patch } from "rfc6902";
@@ -30,7 +30,13 @@ export const annotations = [
 
 export async function update(resource: object | string): Promise<KubeJsonApiData> {
   if (typeof resource === "string") {
-    resource = jsYaml.safeLoad(resource);
+    const parsed = yaml.load(resource);
+
+    if (typeof parsed !== "object") {
+      throw new Error("Cannot update resource to string or number");
+    }
+
+    resource = parsed;
   }
 
   return apiBase.post<KubeJsonApiData>("/stack", { data: resource });