updated core + security fixes

composer.json

@@ -74,7 +74,7 @@
         "drupal/translation_views": "^1.0",
         "drupal/upgrade_status": "^4.3",
         "drupal/views_bulk_edit": "^3",
-        "drupal/views_bulk_operations": "^4.2",
+        "drupal/views_bulk_operations": "^4.3",
         "drupal/workflow": "^1.8",
         "drush/drush": "^12",
         "kint-php/kint": "^5.1",

web/sites/default/default.settings.php

@@ -730,6 +730,8 @@ $settings['container_yamls'][] = $app_root . '/' . $site_path . '/services.yml';
  * Provide a fully qualified class name here if you would like to provide an
  * alternate implementation YAML parser. The class must implement the
  * \Drupal\Component\Serialization\SerializationInterface interface.
+ *
+ * This setting is deprecated in Drupal 10.3 and removed in Drupal 11.
  */
 # $settings['yaml_parser_class'] = NULL;