[Security] Bump js-yaml from 3.10.0 to 3.14.0

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.10.0 to 3.14.0. **This update includes security fixes.**
- [Release notes](https://github.com/nodeca/js-yaml/releases)
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.10.0...3.14.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>