js-yaml Security Bump

Version: 4.37.0 Date: 2026-07-15

Goal: Clear Snyk finding SNYK-JS-JSYAML-17342520 (algorithmic complexity) from transitive electron-updater dependency chain.

Solution: npm override js-yaml to ^4.2.0 (patched, API-compatible).

Files Modified:

• package.json - js-yaml override
• package-lock.json - Lock refresh

Release fragment: security-bump-js-yaml