Merge pull request #6856 from github/security/bump-deps-vuln-218392

Bump js-yaml to a patched version

Author: shawnHartsell

package-lock.json

@@ -19,6 +19,7 @@
     "eslint-plugin-json": "^3.1.0"
   },
   "overrides": {
-    "lodash": ">=4.18.0"
+    "lodash": ">=4.18.0",
+    "js-yaml": "^4.3.0"
   }
-}
+}