fix(deps): update dependency js-yaml to v5 [security] (#30440)

Co-authored-by: Daniel Dietzler <mail@ddietzler.dev>

pnpm-lock.yaml

@@ -536,8 +536,8 @@ importers:
         specifier: ^6.0.0
         version: 6.2.4
       js-yaml:
-        specifier: ^4.1.0
-        version: 4.3.0
+        specifier: ^5.0.0
+        version: 5.2.1
       jsonwebtoken:
         specifier: ^9.0.2
         version: 9.0.3

server/package.json

@@ -82,7 +82,7 @@
     "i18n-iso-countries": "^7.6.0",
     "ioredis": "^5.8.2",
     "jose": "^6.0.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^5.0.0",
     "jsonwebtoken": "^9.0.2",
     "kysely": "0.28.17",
     "kysely-postgres-js": "^3.0.0",

server/src/services/system-config.service.spec.ts

@@ -362,7 +362,7 @@ describe(SystemConfigService.name, () => {
       expect(mocks.logger.error).toHaveBeenCalledTimes(2);
       expect(mocks.logger.error.mock.calls[0][0]).toEqual('Unable to load configuration file: immich-config.json');
       expect(mocks.logger.error.mock.calls[1][0].toString()).toEqual(
-        expect.stringContaining('YAMLException: duplicated mapping key (1:20)'),
+        expect.stringContaining('YAMLException: duplicated mapping key (1:21)'),
       );
     });