fix(deps): [security] bump js-yaml from 3.6.1 to 3.14.0

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.6.1 to 3.14.0. **This update includes security fixes.**
- [Release notes](https://github.com/nodeca/js-yaml/releases)
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.6.1...3.14.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>