update changelog

Author: msimerson

CHANGELOG.md

@@ -6,7 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### [1.5.0] - 2026-03-04
 
--
+- dep: replaced js-yaml with yaml
+  - yaml supports v1.2
+  - js-yaml is barely maintained, replacing it removes most vuln warnings
+- ci: updated publish & release workflows
 
 ### [1.4.2] - 2025-01-08