Merge pull request #4451 from github/nickrolfe-bump-js-yaml-to-v5

Bump js-yaml from ^4.2.0 to ^5.0.0

Author: nickrolfe

extensions/ql-vscode/package-lock.json

@@ -2082,7 +2082,7 @@
     "d3": "^7.9.0",
     "d3-graphviz": "^5.6.0",
     "fs-extra": "^11.1.1",
-    "js-yaml": "^4.2.0",
+    "js-yaml": "^5.0.0",
     "koffi": "^2.15.5",
     "msw": "^2.14.6",
     "nanoid": "^5.0.7",
@@ -2134,7 +2134,6 @@
     "@types/fs-extra": "^11.0.1",
     "@types/gulp": "^4.0.18",
     "@types/jest": "^30.0.0",
-    "@types/js-yaml": "^4.0.6",
     "@types/node": "22.19.*",
     "@types/proper-lockfile": "^4.1.4",
     "@types/react": "^19.2.17",

extensions/ql-vscode/package.json

@@ -11,7 +11,10 @@ const qlpackFileValidate = ajv.compile(qlpackFileSchemaJson);
 export async function loadQlpackFile(path: string): Promise<QlPackFile> {
   const qlpackFileText = await readFile(path, "utf8");
 
-  let qlPack = load(qlpackFileText) as QlPackFile | undefined;
+  let qlPack: QlPackFile | undefined;
+  if (qlpackFileText.trim()) {
+    qlPack = load(qlpackFileText) as QlPackFile | undefined;
+  }
 
   if (qlPack === undefined || qlPack === null) {
     // An empty file is not valid according to the schema since it's not an object,