substrate: update libyaml for vuln