fix: package.json & yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-JSYAML-17342520

Author: snyk-bot

package.json

@@ -40,7 +40,7 @@
     "@devfile/api": "2.3.0-1757407014",
     "fs-extra": "^11.2.0",
     "inversify": "^7.1.0",
-    "js-yaml": "^4.0.0",
+    "js-yaml": "^4.2.0",
     "jsonc-parser": "^3.0.0",
     "jsonschema": "^1.4.1",
     "lodash": "^4.17.21",