Build: Upgrade to js-yaml 3.1.0

Use `.safeLoad()` instead of `.load()`.

https://nodesecurity.io/advisories/JS-YAML_Deserialization_Code_Execution
Build: Upgrade to grunt-jquery-content 0.12.0
0.3.25
Merge pull request #10 from jquery/master

merge with head