Bump safe_yaml to ~> 1.0.0

Be more strict about what versions we'll take, since this is the stable
branch
Merge pull request #1942 from jekyll/v1-stable-safe-yaml-update
Update history to reflect merge of #1942 [ci skip]