JS: Change note

asgerf · asgerf · commit 5f011a262c47 · 2023-04-26T12:49:24.000+02:00
diff --git a/javascript/ql/src/change-notes/2023-04-26-unsafe-yaml-deserialization.md b/javascript/ql/src/change-notes/2023-04-26-unsafe-yaml-deserialization.md
@@ -0,0 +1,5 @@
+---
+category: minorAnalysis
+---
+* The `js/unsafe-deserialization` query no longer flags deserialization through the `js-yaml` library, except
+  when it is used with an unsafe schema.
