chore: bump js-yaml

[Dario Valdespino (darvld)]

Bumps js-yaml to 4.3.0 to address dependabot reports.

[codecov]

Bundle Report

Bundle size has no change ✅

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.81%. Comparing base (32600d0) to head (721b81d).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #256   +/-   ##
=======================================
  Coverage   86.81%   86.81%           
=======================================
  Files          13       13           
  Lines        1365     1365           
=======================================
  Hits         1185     1185           
  Misses        180      180           

[Copilot]

Pull request overview

Updates the project’s JavaScript YAML parsing dependency to the newer js-yaml release, with corresponding lockfile updates, aiming to address dependency/security tooling reports.

Changes:

• Bump js-yaml from 4.1.1 to 4.3.0 in package.json.
• Update bun.lock to reflect the new top-level js-yaml@4.3.0 resolution.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Bumps the direct devDependency js-yaml to 4.3.0.
bun.lock	Updates lock entries for js-yaml, but still includes older transitive js-yaml versions via cosmiconfig tooling.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.