chore(deps): bump transitive js-yaml to 4.3.2

[FROWNINGdev]

Resolves Dependabot alert #14 (high): js-yaml maxTotalMergeKeys does not limit CPU use for empty merge sources, affecting >=4.0.0 <4.3.2. The package is a transitive dev dependency.

Only the js-yaml entry in package-lock.json changes (version, resolved, integrity). Regenerating the lockfile with a local npm 10 would also have stripped the libc fields written by a newer npm, so that churn is left out on purpose.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 88b289ae-bdd1-42f8-ac7b-c16331992c28

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}