chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 4 open Dependabot security alerts by bumping vulnerable transitive dependencies via npm overrides

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#130	fast-uri	high	Bumped override to 3.1.4
#129	fast-uri	high	Bumped override to 3.1.4
#128	js-yaml	medium	Added override pinning to ^3.15.0
#127	js-yaml	medium	Added nested override for the js-yaml dependency of cosmiconfig pinning it to ^4.2.0

[Copilot]

Pull request overview

Resolves Dependabot security alerts by updating npm overrides to force patched versions of vulnerable transitive dependencies, and regenerating package-lock.json accordingly.

Changes:

• Bump fast-uri override to 3.1.4.
• Add overrides to move js-yaml to ^3.15.0, and specifically override cosmiconfig’s js-yaml to ^4.2.0.
• Update package-lock.json to reflect the new resolved dependency graph (e.g., js-yaml 3.15.0 / 4.3.0 and fast-uri 3.1.4).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates overrides to force patched transitive dependency versions implicated by Dependabot alerts.
package-lock.json	Lockfile updates reflecting the new override-resolved versions (fast-uri, js-yaml, and nested dependency resolutions).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.