Update js-yaml within existing major versions

Upgrade the direct dependency from 5.2.3 to 5.4.2 and refresh eligible
transitive copies to 3.15.2 and 4.3.2. Preserve markdownlint-cli2's
exact 5.2.2 requirement.

Select releases published before October 5, 2026 at 21:43:58 UTC,
more than 14 days before this update. Exclude 5.4.3 and 5.5.0.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 324aab52-a07d-4fdd-88e5-508d28dbc858

Author: cklin

extensions/ql-vscode/package-lock.json

@@ -2081,7 +2081,7 @@
     "chokidar": "^5.0.0",
     "d3-graphviz": "^5.6.0",
     "fs-extra": "^11.1.1",
-    "js-yaml": "^5.2.3",
+    "js-yaml": "^5.4.2",
     "koffi": "^3.3.2",
     "msw": "^2.15.0",
     "p-queue": "^8.0.1",