fix: override picomatch and yaml package security alerts (#822)

Author: yeojz

package.json

@@ -70,7 +70,9 @@
       "preact@>=10.28.0 <10.28.2": ">=10.28.2",
       "rollup@>=4.0.0 <4.59.0": ">=4.59.0",
       "flatted@<=3.4.1": ">=3.4.2",
-      "undici": ">=7.24.0"
+      "undici": ">=7.24.0",
+      "picomatch@>=4.0.0 <4.0.4": ">=4.0.4",
+      "yaml@>=2.0.0 <2.8.3": ">=2.8.3"
     }
   },
   "packageManager": "[email protected]",