chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Bumped js-yaml to 4.3.1 via the resolutions field to resolve a high severity vulnerability (quadratic CPU consumption in !!omap resolution)

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#54	js-yaml	high	Bumped to 4.3.1 via yarn resolution

[Copilot]

Pull request overview

This PR resolves a high-severity Dependabot alert by forcing js-yaml to a non-vulnerable version using Yarn’s resolutions, ensuring transitive consumers don’t pull an affected release.

Changes:

• Bumped the Yarn resolutions entry for js-yaml to ^4.3.1.
• Updated yarn.lock to lock js-yaml at 4.3.1.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates the resolutions override to require js-yaml^4.3.1.
yarn.lock	Locks js-yaml to 4.3.1 to reflect the updated resolution.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.