Major package upgrade js-yaml

[melroy89]

Lets start with the obvious upgrade, the js-yaml security vulnerability (production dependency).

I tried running the test.. Gave error (I think I blame xo from the pretest step?):

npm test        

> @istanbuljs/load-nyc-config@1.1.0 pretest
> xo

TypeError: util.isDate is not a function
Occurred while linting /home/melroy/Documents/projects/load-nyc-config/index.js:3
...

But also tap won't run anymore...

./node_modules/tap/bin/run.js 
TypeError: Cannot read properties of undefined (reading 'getFileName')
    at module.exports (/home/melroy/Documents/projects/load-nyc-config/node_modules/tap/node_modules/caller-path/index.js:4:40)

Also you can use fs.readFileSync today, instead of wrapping it in promisify 😨 .

Fixes: #22

[melroy89]

I'm also fine if this other PR gets merged instead: #24 which fixes more issues present in this repo that I did mention above as well.

[GaneshBalajii]

I looking for this PR to merge, as there is security vulnerability raised in prod envs