Replace deprecated serde_yaml 0.9.34+deprecated (upstream archived)

[chirag127]

Problem

serde_yaml is deprecated and its upstream repo dtolnay/serde-yaml is archived on GitHub. Latest release is 0.9.34+deprecated (2024-03-25); the +deprecated build-metadata tag is the maintainer's explicit end-of-life signal.

Steps

1. git clone https://github.com/analysis-tools-dev/static-analysis && cd static-analysis
2. grep -rn serde_yaml ci/

Expected

Actively maintained YAML crate.

Actual

• ci/Cargo.toml:16 — serde_yaml = "0.9"
• ci/render/Cargo.toml:54 — serde_yaml = { workspace = true }
• ci/pr-check/Cargo.toml:42 — serde_yaml = { workspace = true }
• ci/Cargo.lock resolves to serde_yaml 0.9.34+deprecated
• Upstream dtolnay/serde-yaml: archived: true (verified via GitHub API)

Dependabot PRs (e.g. #1554) only bump within the deprecated line; no migration exists.

Environment

Rust edition 2024, workspace resolver 2 (ci/Cargo.toml).

Migration candidates: serde_yml (community fork) or serde-yaml-bw.

Thanks for maintaining analysis-tools-dev/static-analysis!