Bump js-yaml to 2.0