The override was already in package.json, but the lockfile still nested js-yaml 3.15.0 under gray-matter. Drop that copy so the tree uses 4.3.2 and Renovate cannot propose js-yaml 5 until Eleventy supports it.
