{
    "$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json",
    "low": true,
    "allowlist": [
        // GHSA-h67p-54hq-rp68 (js-yaml):
        // Jest coverage tooling still resolves a js-yaml 3.x line; the non-affected
        // release is 4.x, so avoid a major-crossing override in this SDK package.
        // Owner: team-engineering-reviewers. Tracking: create internal ticket.
        // Expires: 2026-06-30.
        "GHSA-h67p-54hq-rp68"
    ]
}