Security: Update html-minifier and js-yaml dependencies

[mitselek]

Summary

The current dependencies have known security vulnerabilities:

html-minifier 4.0.0 (High severity)

• Issue: ReDoS vulnerability
• Advisory: GHSA-pfq8-rq6v-vf5m
• Suggested fix: Replace with html-minifier-terser (actively maintained fork) ^7.2.0

js-yaml 4.1.0 (Moderate severity)

• Issue: Prototype pollution in merge (<<)
• Advisory: GHSA-mh29-5h37-fv8m
• Suggested fix: Update to ^4.2.0 (if available) or consider alternative

npm audit output

# npm audit report

html-minifier  *
Severity: high
kangax html-minifier REDoS vulnerability
No fix available
node_modules/html-minifier
  entu-ssg  *
  Depends on vulnerable versions of html-minifier
  Depends on vulnerable versions of js-yaml

js-yaml  4.0.0 - 4.1.0
Severity: moderate
js-yaml has prototype pollution in merge (<<)
No fix available
node_modules/js-yaml

3 vulnerabilities (1 moderate, 2 high)

Environment

• entu-ssg: 5.6.15 (latest)
• Node: v25.2.1

Thank you for maintaining this project!