chore(deps): bump yaml from 2.8.2 to 2.8.3 in /evals/open-model-gym/suite (#8124)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Douwe Osinga <douwe@squareup.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@squareup.com>

deny.toml

@@ -10,4 +10,5 @@ unsound = "none"
 # See: https://github.com/block/goose/issues/7008
 ignore = [
     "RUSTSEC-2024-0370",  # proc-macro-error is unmaintained
+    "RUSTSEC-2023-0071",  # rsa: Marvin Attack timing sidechannel (no safe upgrade available, via jsonwebtoken)
 ]

evals/open-model-gym/suite/package-lock.json

@@ -9,7 +9,7 @@
       "version": "0.1.0",
       "dependencies": {
         "glob": "^11.0.0",
-        "yaml": "^2.4.0"
+        "yaml": "^2.8.3"
       },
       "devDependencies": {
         "@types/node": "^22.0.0",
@@ -1065,9 +1065,9 @@
       }
     },
     "node_modules/yaml": {
-      "version": "2.8.2",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz",
-      "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==",
+      "version": "2.8.3",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
       "license": "ISC",
       "bin": {
         "yaml": "bin.mjs"

evals/open-model-gym/suite/package.json

@@ -9,7 +9,7 @@
   },
   "dependencies": {
     "glob": "^11.0.0",
-    "yaml": "^2.4.0"
+    "yaml": "^2.8.3"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",