Bump yaml from 2.7.1 to 2.8.0

[dependabot]

Bumps yaml from 2.7.1 to 2.8.0.

Release notes

Sourced from yaml's releases.

v2.8.0

• Add node cache for faster alias resolution (#612)
• Re-introduce compatibility with Node.js 14.6 (#614)
• Add --merge option to CLI tool (#611)
• Improve error for tag resolution error on null value (#616)
• Allow empty string as plain scalar representation, for failsafe schema (#616)
• docs: include cli example (#617)

Commits

• c000eb7 2.8.0
• 1e85fc8 style: Apply updated lint rules
• 02f7d5f chore: Refresh lockfile
• 389ca7c docs: include cli example (#617)
• 0f29ce6 feat: Add --merge option to CLI tool (#611)
• e00cab9 fix: Improve error for tag resolution error on null value (#616)
• 2a841cc fix: Allow empty string as plain scalar representation, for failsafe schema (...
• 55c5ef4 feat: Add node cache for faster alias resolution (#612)
• ab17552 Merge pull request #614 from eemeli/engines-compat
• b27c124 ci: Re-introduce tests for Node.js 14.6 and later
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ JSON	jsonlint	8		0	0	0.24s
✅ JSON	npm-package-json-lint	yes		no	no	0.69s
✅ JSON	prettier	8		0	0	1.29s
✅ JSON	v8r	8		0	0	11.87s
✅ MARKDOWN	markdownlint	1		0	0	0.78s
✅ REPOSITORY	checkov	yes		no	no	20.59s
✅ REPOSITORY	gitleaks	yes		no	no	0.62s
✅ REPOSITORY	git_diff	yes		no	no	0.03s
✅ REPOSITORY	secretlint	yes		no	no	1.27s
✅ REPOSITORY	syft	yes		no	no	11.42s
✅ REPOSITORY	trivy-sbom	yes		no	no	1.5s
✅ REPOSITORY	trufflehog	yes		no	no	26.13s
✅ TYPESCRIPT	prettier	23		0	0	2.58s
✅ YAML	prettier	13		0	0	1.03s
✅ YAML	v8r	13		0	0	6.88s
✅ YAML	yamllint	13		0	0	0.61s

See detailed report in MegaLinter reports