Merge pull request #1358 from processing/dependabot/npm_and_yarn/yaml-2.2.2

Bump yaml from 1.10.2 to 2.2.2

Author: Qianqianye

package-lock.json

@@ -90,7 +90,7 @@
     "simple-git": "^3.16.0",
     "time-grunt": "^1.4.0",
     "uglify-js": "^2.8.29",
-    "yaml": "^1.10.2"
+    "yaml": "^2.2.2"
   },
   "dependencies": {
     "upath": "^1.2.0"