Removes [yaml](https://github.com/eemeli/yaml). It's no longer used after updating ancestor dependency [xo](https://github.com/xojs/xo). These dependencies need to be updated together.


Removes `yaml`

Updates `xo` from 0.48.0 to 0.54.1
- [Release notes](https://github.com/xojs/xo/releases)
- [Commits](xojs/xo@v0.48.0...v0.54.1)

---
updated-dependencies:
- dependency-name: yaml
  dependency-type: indirect
- dependency-name: xo
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

…xo--removed

build(deps): bump yaml and xo

The reason it was there was because "If I remember correctly there was some mXSS risk connected to those", however I searched and couldn't find one (and neither could cure53 #573 (comment)) and so I change it back.

Moved feDropShadow to the svg filter allowlist

support TRUSTED_TYPES_POLICY configuration option

…object

Bumps [engine.io](https://github.com/socketio/engine.io) and [socket.io](https://github.com/socketio/socket.io). These dependencies needed to be updated together.

Updates `engine.io` from 6.2.1 to 6.4.2
- [Release notes](https://github.com/socketio/engine.io/releases)
- [Changelog](https://github.com/socketio/engine.io/blob/main/CHANGELOG.md)
- [Commits](socketio/engine.io@6.2.1...6.4.2)

Updates `socket.io` from 4.5.3 to 4.6.1
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](socketio/socket.io@4.5.3...4.6.1)

---
updated-dependencies:
- dependency-name: engine.io
  dependency-type: indirect
- dependency-name: socket.io
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

…-and-socket.io-6.4.2

build(deps): bump engine.io and socket.io

create internal trustedTypes policy only if not specified via config object

Merge main into 3.x