chore(deps): bump yaml to ^2.8.3 (#1062)

Update yaml dependency across all packages to resolve vulnerability
in prior versions. Bumps minimum from ^2.6.0/^2.6.1/^2.7.1 to ^2.8.3.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: christso

apps/cli/package.json

@@ -41,7 +41,7 @@
     "json5": "^2.2.3",
     "micromatch": "^4.0.8",
     "semver": "^7.7.4",
-    "yaml": "^2.6.1"
+    "yaml": "^2.8.3"
   },
   "peerDependencies": {
     "@mariozechner/pi-coding-agent": "^0.62.0"

bun.lock

@@ -4,6 +4,6 @@
   "type": "module",
   "dependencies": {
     "@agentv/eval": "file:../../../packages/eval",
-    "yaml": "^2.7.1"
+    "yaml": "^2.8.3"
   }
 }

examples/showcase/evaluator-conformance/package.json

@@ -38,7 +38,7 @@
     "p-limit": "^6.1.0",
     "tsup": "8.3.5",
     "typescript": "5.8.3",
-    "yaml": "^2.6.1"
+    "yaml": "^2.8.3"
   },
   "dependencies": {
     "@openrouter/ai-sdk-provider": "^2.3.3"

package.json

@@ -53,7 +53,7 @@
     "fast-glob": "^3.3.3",
     "json5": "^2.2.3",
     "micromatch": "^4.0.8",
-    "yaml": "^2.6.0",
+    "yaml": "^2.8.3",
     "zod": "^3.23.8"
   },
   "optionalDependencies": {