ACM-43749 update js-yaml

[KevinFCormier]

Updates package js-yaml to versions 3.15.2 and 4.3.2 to addresses CVE:
CVE-2026-84375.

Also needed to update @cypress/code-coverage to 4.0.3.

Jira ticket:
https://redhat.atlassian.net/browse/ACM-43749

Frontend commands:
npm i @cypress/code-coverage@latest -w @patternfly-labs/react-form-wizard
npm update js-yaml

Backend commands:
npm update js-yaml

Summary by CodeRabbit

• Chores
  • Updated the development tooling used for code coverage reporting.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: d80b9376-e88d-496a-875c-c7168c441105

📥 Commits

Reviewing files that changed from the base of the PR and between 423bca8 and fb148b4.

⛔ Files ignored due to path filters (2)

• backend/package-lock.json is excluded by !**/package-lock.json
• frontend/package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• frontend/packages/react-form-wizard/package.json

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

📝 Walkthrough

Walkthrough

The React form wizard package updates its @cypress/code-coverage development dependency from ^3.14.7 to ^4.0.3.

Changes

Cypress code coverage dependency

Layer / File(s)	Summary
Update coverage dependency frontend/packages/react-form-wizard/package.json	The development dependency changes from ^3.14.7 to ^4.0.3.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to fb148

This PR updates dependency versions and related lockfiles without any identified merge-blocking risk; it is ready for normal checks and review.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title identifies the Jira ticket and the primary js-yaml dependency update. It is concise and related to the main change.
Description check	✅ Passed	The description explains the security update, lists the Jira ticket, identifies the related dependency update, and provides update commands. It omits the template checklist and change-type selection, …
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Description check

Explanation

The description explains the security update, lists the Jira ticket, identifies the related dependency update, and provides update commands. It omits the template checklist and change-type selection, but the critical context is present.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}

[KevinFCormier]

/cc @oksanabaza

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[oksanabaza]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: KevinFCormier, oksanabaza

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [KevinFCormier,oksanabaza]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment