Bump safe_yaml to ~> 1.0.0

Be more strict about what versions we'll take, since this is the stable
branch.

This fixes #1792 for the 1.4.x series of releases.