Fix security vulnerability: Upgrade js-yaml to 4.3.1 in smoke tests

[EmmaYuan1015]

Description

Dependabot reports a security vulnerability in js-yaml from the smoke test
dependency manifest:

• Manifest: test/smoke/package-lock.json
• Current version: 4.3.0
• Patched version: 4.3.1 or later

The smoke test project declares js-yaml as a direct development dependency.
Mocha also depends on it transitively, and npm deduplicates both dependency paths
to the direct version.

Proposed solution

Upgrade the direct js-yaml development dependency from 4.3.0 to 4.3.1
and regenerate the smoke test lock file.

Expected result

• All smoke test dependency paths resolve to js-yaml@4.3.1.
• The js-yaml Dependabot alert is resolved.
• The smoke test project continues to compile successfully.

Validation

• npm ci completed successfully in test/smoke.
• npm ls js-yaml shows all paths resolved to js-yaml@4.3.1.
• npm audit no longer reports a vulnerability for js-yaml.
• npm run compile-smoke-tests completed successfully.