fix(deps): pin js-yaml to 4.3.1

[petercr]

What changed

• Pin the direct js-yaml dependency to 4.3.1.
• Update the workspace override and pnpm lockfile so transitive Electron tooling resolves the same patched version.

Why

The repository currently resolves js-yaml 4.3.0. This update keeps the direct and transitive dependency graph on the patched 4.3.1 release.

Validation

• git diff --check
• Lockfile, workspace override, and package manifest updated together.
• Dependency install and advisory checks are left to GitHub Actions.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: b85da45f-5f9b-4026-b78e-1a3641dd891c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[petercr]

Superseded by PR #180, which now contains both the Windows recording/FFmpeg fix and the js-yaml security update.