Merge pull request #29 from advanced-security/dependabot/npm_and_yarn/production-dependencies-51c77ecc25

Bump yaml from 2.8.1 to 2.8.2 in the production-dependencies group

Author: aegilops

package-lock.json

@@ -32,7 +32,7 @@
     "p-limit": "^7.2.0",
     "packageurl-js": "^2.0.1",
     "semver": "^7.7.3",
-    "yaml": "^2.8.1",
+    "yaml": "^2.8.2",
     "yargs": "^18.0.0"
   },
   "devDependencies": {