chore(deps): bump js-yaml from 4.3.0 to 4.3.1

[dependabot]

Bumps js-yaml from 4.3.0 to 4.3.1.

Changelog

Sourced from js-yaml's changelog.

4.3.1 - 2026-07-31

Security

• [backport] Remove quadratic complexity from !!omap duplicate key detection.

Commits

• 86e91b8 4.3.1 released
• c3cc4b0 Backport quadratic complexity fix for !!omap
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

code-to-gate PR Review

Gate Verdict

• Status: block
• Readiness: blocked_input
• Findings: 0 total, 0 critical, 0 high

Blocking Reasons

• [critical] UNKNOWN_CONDITION: Input evidence is partial

Acceptable Risks

• [info] No unsupported claims are present: LLM or imported claims that lack evidence are not present in findings.unsupported_claims.
• [info] Public docs, CLI, schema, and schema coverage are aligned: 8 spec drift checks passed without failures.

Suggested Tests

• [medium] Run src/cli/tests/exit-codes.test.ts: Test path matched changed source path. Command: npm test -- src/cli/tests/exit-codes.test.ts Source: test-plan-001, src/cli/exit-codes.ts

Spec Drift

• No spec drift was found or no spec-drift artifact was provided.

Drift Budget

• No drift budget summary is available.

Evidence Links

• Release readiness: .qh/release-readiness.json schema: release-readiness@v1 hash: 7e057bfe94460c5b
• Findings: .qh/findings.json schema: findings@v1 hash: 5cb4d8b0dda0763e
• Auto test plan: .qh/test-plan.json schema: test-plan@v1 hash: 4a94ed3b22cbdb4e
• Spec drift: .qh/spec-drift.json schema: spec-drift@v1 hash: 998e3f883ca75213
• Evidence DAG: .qh/evidence-dag.json schema: evidence-dag@v1 hash: 34348f979af25eda
• QEG evidence input: .qh/qeg-code-to-gate.json schema: ctg.qeg-input/v1 hash: ed0ac5557e32c646
• Published quality report: https://github.com/RNA4219/code-to-gate/actions/runs/31291366386

Suppression / Baseline Summary

• No baseline summary is available.

Gate Explainability

• No gate explainability summary is available.

---

Generated by code-to-gate v1.5.1