fix: bump js-yaml to ^4.3.1 to resolve GHSA-5p4m-2wfm-xmqj

Leave the package version bump/release out of this PR; that's a separate
step for whoever cuts the next release (release.yml triggers off a
pushed git tag, not off package.json's version field).

Author: 0x74696D

package-lock.json

@@ -19,7 +19,7 @@
     "url": "https://github.com/DataDog/dd-wasm-js-rewriter/issues"
   },
   "dependencies": {
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.3.1",
     "lru-cache": "^7.14.0",
     "module-details-from-path": "^1.0.4",
     "node-gyp-build": "^4.8.4"