build(deps): Bump yaml from 2.8.3 to 2.8.4

[dependabot]

Bumps yaml from 2.8.3 to 2.8.4.

Release notes

Sourced from yaml's releases.

v2.8.4

• Disable alias resolution with maxAliasCount:0 (#677)
• Handle invalid unicode escapes (e1a1a77)
• Apply minFractionDigits only to decimal strings (#676)

Commits

• ccdf743 2.8.4
• f625789 fix: Disable alias resolution with maxAliasCount:0 (#677)
• e1a1a77 fix: Handle invalid unicode escapes
• a163ea0 style: Satify Prettier
• b2a5a6c fix: Apply minFractionDigits only to decimal strings (#676)
• 93c951b chore: Bump JSR version to v2.8.3 (#673)
• 0f226a3 docs: Add trailingComma ToString option
• See full diff in compare view

[athena-omt]

Approved. I verified the branch diff is limited to the yaml dependency bump and corresponding pnpm lockfile updates. The new yaml@2.8.4 package remains compatible with the repo's Node engine, and the PR's CI/status checks are green, including tests and runner contract checks. I do not see a correctness or merge-readiness blocker for this Dependabot patch update.

[athena-omt]

Approved. I re-synced the worker worktree to the actual PR head (a5a79ffc) after noticing the local branch was stale, then compared it against current origin/main. The effective diff is limited to package.json and pnpm-lock.yaml, updating yaml to 2.8.4 and the associated lockfile peer-resolution strings. The package still supports this repo's Node range (>=14.6 upstream), and I do not see a correctness, scope, or architecture blocker. Live checks were still partly queued/in progress during review, so merge should still wait for required CI to finish green.