It's ~1.0 in master which will download a 1.1 once it's released. I didn't like that idea for a stable branch that's supposed to be relatively stable. So I locked it to 1.0.x. Do we want to let Jekyll 1.x float on safe_yaml 1.x?