chore: Bump js-yaml from 4.2.0 to 4.3.0

[ernst-dev]

Bumps js-yaml from 4.2.0 to 4.3.0 to address a quadratic-complexity DoS in YAML merge-key handling.

Lockfile-only change (transitive dependency; package-lock.json only). Dependency set unchanged (argparse ^2.0.1).

• Advisory: GHSA-52cp-r559-cp3m (High)
• Vulnerable versions: >= 4.0.0, < 4.3.0 — Patched version: 4.3.0

Opened by roko-dependabot-handler on behalf of @ernst-dev to remediate a Dependabot alert that had no auto-generated fix.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.79%. Comparing base (3e7cb89) to head (b883bae).

❌ Your project check has failed because the head coverage (87.79%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #155   +/-   ##
=======================================
  Coverage   87.79%   87.79%           
=======================================
  Files          25       25           
  Lines         344      344           
  Branches       95       94    -1     
=======================================
  Hits          302      302           
  Misses         42       42           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.