Bump js-yaml to fix Denial of Servic vulnerability

[vernondegoede]

What is the purpose of this pull request? (put an "X" next to item)

[ ] Documentation update
[ ] Bug fix (template)
[ ] New rule (template)
[ ] Changes an existing rule (template)
[ ] Add autofixing to a rule
[ ] Add a CLI option
[ ] Add something to the core
[X] Other, please explain:

What changes did you make? (Give an overview)

• Version bumped the js-yaml dependency to fix https://www.npmjs.com/advisories/788.

Is there anything you'd like reviewers to focus on?
Please check whether everything still works as expected after bumping the version.
This shouldn't be the case, as explained in the js-yaml CHANGELOG.

[jsf-clabot]

All committers have signed the CLA.

[platinumazure]

LGTM, thanks!

Note to merger: The commit summary should start with "Upgrade: ".

[vernondegoede]

What do the release cycles of ESLint look like? When can we expect the next release?

[platinumazure]

Hi @vernondegoede.

Per our readme, we release every 2 weeks. You can use this link to track our release management issues: release This issue contains information about a scheduled ESLint release

[vernondegoede]

Cool, thanks @platinumazure. I like how @eslintbot is used for automation of almost everything.