Update vulnerable npm dependencies

[rzhao271]

Component Governance reports these npm dependency updates are available in the VS Code feed:

• brace-expansion: 1.1.14 -> 1.1.17
• brace-expansion: 2.1.0 -> 2.1.3
• brace-expansion: 5.0.6 -> 5.0.8
• js-yaml: 4.2.0 -> 4.3.2

Update each applicable dependency path and validate with relevant tests, linting, and build. Do not use dependency overrides, resolutions, --force, --legacy-peer-deps, or equivalent force flags.