chore(deps): bump js-yaml

Author: EndBug

lib/index.js

@@ -35,11 +35,11 @@
   "homepage": "https://github.com/EndBug/add-and-commit#readme",
   "dependencies": {
     "@actions/core": "^1.2.6",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "simple-git": "^2.27.0"
   },
   "devDependencies": {
-    "@types/js-yaml": "^3.12.5",
+    "@types/js-yaml": "^4.0.0",
     "@types/node": "^12.12.54",
     "@typescript-eslint/eslint-plugin": "^2.34.0",
     "@typescript-eslint/parser": "^2.34.0",

package-lock.json

@@ -356,7 +356,7 @@ function parseInputArray(input: string): string[] {
   } catch {}
 
   try {
-    const yaml = YAML.safeLoad(input)
+    const yaml = YAML.load(input)
     if (
       yaml &&
       Array.isArray(yaml) &&