Using vulnerable `js-yaml` version

[Arturo Pie]

bootstrap-loader is using a vulnerable dependency. See:

and: https://github.com/shakacode/bootstrap-loader/blob/master/package.json#L51

[Justin Gordon]

@arturopie Any chance that you can throw in a PR?

[Alec Flett]

@arturopie I just pushed one up!

[Arturo Pie]

Thanks for the PR @alecf.
I'm sorry I didn't reply earlier @justin808, I have been very busy recently.

[Justin Gordon]

@alecf @arturopie I just pushed 3.0.3 without local testing. Please confirm that you don't have any issues.

[Arturo Pie]

@justin808 no issues so far. Thanks!

[amenawat]

v3.0.3 uses js-yaml@3.13.0, but according to https://npmjs.com/advisories/813, it is patched in >=3.13.1. Can you please update this? Thank you.

[Justin Gordon]

Released!