Bump yaml and xo

[dependabot[bot]]

Removes yaml. It's no longer used after updating ancestor dependency xo. These dependencies need to be updated together.

Removes yaml

Updates xo from 0.38.2 to 0.54.1

Release notes

Sourced from xo's releases.

v0.54.1

• Fix rule conflict (#714) 658d376

https://github.com/xojs/xo/compare/v0.54.0...v0.54.1

v0.54.0

New rules

• unicorn/no-typeof-undefined
• unicorn/no-negated-condition
• unicorn/prefer-set-size
• @typescript-eslint/no-duplicate-type-constituents

Improvements

• Support TypeScript 5 (#712) a815db3

https://github.com/xojs/xo/compare/v0.53.1...v0.54.0

v0.53.1

• Improve performance (#697) 9bee815

https://github.com/xojs/xo/compare/v0.53.0...v0.53.1

v0.53.0

Breaking

• Require Node.js 14 91d10d1
• TypeScript: It will now use inline type imports when auto-fixing https://github.com/xojs/eslint-config-xo-typescript/commit/e41f4a4032882da4f19d4ff69d303f8a1f2e127d

New rules

• no-empty-static-block
• no-new-native-nonconstructor
• unicorn/no-unnecessary-await
• unicorn/switch-case-braces
• unicorn/prefer-logical-operator-over-ternary
• unicorn/prefer-event-target
• @typescript-eslint/no-unsafe-declaration-merging

https://github.com/xojs/xo/compare/v0.52.4...v0.53.0

v0.52.4

• Fix a bug with relative extends (#686) e69a192

https://github.com/xojs/xo/compare/v0.52.3...v0.52.4

v0.52.3

• Fix compatibility problem with Windows (#687) a608bf1

... (truncated)

Commits

• 2a3d19c 0.54.1
• 658d376 Fix rule conflict (#714)
• 9c38358 0.54.0
• 9a56713 Update dependencies
• a815db3 Support TypeScript 5 (#712)
• 58225b7 Remove link to deprecated tslint-xo (#708)
• 225f879 Fix broken link
• fe6db72 Update dependencies
• 613011b 0.53.1
• 9bee815 Improve performance (#697)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ben-eb/gulp-svgmin/network/alerts).

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.