Lock eslint-config-yscope dependency to a specific version (not latest or *)

[coderabbitai]

Currently, the 'eslint-config-yscope' dependency is referenced using the 'latest' tag or *. Based on recent discussions and experiments (see PR #285, comment), we found that using 'latest' or * can lead to inconsistent dependency resolution and upgrades. To ensure reproducibility and avoid unexpected upgrades, we should lock 'eslint-config-yscope' at a specific version number. Whenever a new version is released, we will update the version string explicitly in this repository. Requested by @junhaoliao.