Bump js-yaml to 3.14.2, 4.1.1

Due to github/advisory-database#6420
[email protected] is still not considered as non-vulnerable as of
2025-11-17

Author: louischan-oursky

authui/package-lock.json

@@ -111,7 +111,7 @@
     "history": "5.3.0",
     "immer": "10.0.3",
     "intl-tel-input": "18.5.3",
-    "js-yaml": "4.1.0",
+    "js-yaml": "^4.1.1",
     "libphonenumber-js": "^1.12.9",
     "luxon": "^3.7.1",
     "monaco-editor": "0.44.0",