Override js-yaml@<=2.0.4 to 3.14.2 to fix code execution vulnerability

Author: BPapp-MS

common/config/rush/pnpm-config.json

@@ -252,7 +252,10 @@
     "loader-utils@^2.0.0": "2.0.4",
 
     // `fast-xml-parser@5.3.3` has a vulnerability
-    "fast-xml-parser@^5.3.3": "5.3.5"
+    "fast-xml-parser@^5.3.3": "5.3.5",
+
+    // `js-yaml@<=2.0.4` has a code execution vulnerability in the YAML deserializer
+    "js-yaml@<=2.0.4": "3.14.2"
   },
 
   /**

common/config/subspaces/build-tests-subspace/pnpm-lock.yaml

@@ -1,6 +1,6 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "ae06e3ff5f65c89fd6b5c88cb4bce597f4a5aa18",
+  "pnpmShrinkwrapHash": "f59fe35322490ebd9e2c6f874d37b8a55247ecc3",
   "preferredVersionsHash": "550b4cee0bef4e97db6c6aad726df5149d20e7d9",
   "packageJsonInjectedDependenciesHash": "fa90a0a032a0046e646e8751bbc6d0be86a4dda1"
 }

common/config/subspaces/build-tests-subspace/repo-state.json

@@ -1,5 +1,5 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "54470e7caa94b190d86dbd4f9cc43e0d58456972",
+  "pnpmShrinkwrapHash": "7fb212a92af318a9c2fc802013033ba28900ae62",
   "preferredVersionsHash": "029c99bd6e65c5e1f25e2848340509811ff9753c"
 }