build(deps): bump remarshal from 1.3.0 to 2.0.0 in /yaml

[dependabot]

Bumps remarshal from 1.3.0 to 2.0.0.

Release notes

Sourced from remarshal's releases.

v2.0.0

• Implemented an --expand-aliases option for YAML (#62)
• Implemented support for Starlark data transformations
• Migrated project magement from Poetry to uv. (Poetry Core remains the build backend. No uv_build because building it requires Rust and there are no binary wheels for the BSDs.)
• Updated the versioning policy: the CLI is stable, but Remarshal can drop old Python versions and break the Python API
  • Broke the Python API to refactor encoders and decoders into classes
• Upgraded the dependencies
  • Fixed an upstream cbor2 denial-of-service vulnerability, CVE-2026-26209
• Added CI testing on FreeBSD, NetBSD, and OpenBSD

Commits

• 2b1efae test: make starlark import non-optional
• 283f802 build(deps): upgrade Starlark
• 0c50966 feat(starlark)!: rename custom functions
• c1d2195 docs(readme): improve Starlark info and link
• 9aa4e34 build(deps): make Starlark non-optional
• 54664bc docs(comments): edit to match project style
• 107eb64 refactor(codec): drop default_options
• 568482b refactor(main): inline YAML version mapping
• ec7f9b8 refactor(decoder): drop format kwarg
• 59074d8 refactor(*): convert encoders/decoders to classes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)