Removing yarn.lock (security update)

Remove yarn.lock to avoid referring to a version of set-value (2.0.0) that had a vulnerability. This was a dependency used in development - not shipped with the journal deployment.

See https://snyk.io/test/npm/set-value/2.0.0

v1.2

This updates a few dependencies that needed updating but doesn't update a couple because they included breaking changes.

Following my decision to stop maintaining journal, I'm not going to keep updating dependencies.

See #118 for details.

Security Update

Updates js-yaml to prevent running of code injected via yaml.

For more details see #81

This only affects anyone giving third-party control of yaml blog content. journal does not do this itself.

journal v1.0 (Blog UI Only)

This release contains the blog-hosting component. Integration with Matrix is an outstanding task.

See #70 for up-to-date details.