fix(deps): update dependency yaml to v2.8.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
yaml (source)	2.8.0 -> 2.8.1

---

Release Notes

eemeli/yaml (yaml)

v2.8.1

Compare Source

• Preserve empty block literals (#​634)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.12%. Comparing base (e52e064) to head (e29ee45).
⚠️ Report is 5 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #124   +/-   ##
=======================================
  Coverage   98.12%   98.12%           
=======================================
  Files          15       15           
  Lines         586      586           
=======================================
  Hits          575      575           
  Misses         11       11           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

• Single targeted fix: Preserves empty block literals (issue #634)
• No breaking changes: Minor patch release with backward compatibility
• No security fixes: No security-related changes mentioned
• Documentation updates: Minor improvements to vulnerability reporting and README

🎯 Impact Scope Investigation

• Limited usage: yaml package only used in lib/cli/commands/install/action-yaml.ts:3 and lib/cli/commands/install/action-yaml.ts:93,121
• Specific use case: Only used for parsing GitHub Actions YAML files via parseYaml() function
• No API changes: The parse function interface remains unchanged
• No dependency conflicts: Clean upgrade in bun.lock with no cascading changes

💡 Recommended Actions

• Safe to merge: This is a minor patch release that fixes a specific parsing edge case
• No code changes required: The fix for empty block literals is handled internally by the yaml library
• Consider auto-merge: This type of patch release could be safely auto-merged in the future

🔗 Reference Links

• Release Notes v2.8.1
• Issue #634 - Empty block literals