Bump js-yaml min version