chore(deps): security audit & remediation for Node-1st-gen

[inlined]

Security Audit & Remediation: Node-1st-gen

A. Previous CVEs

• Removed total of 1,000+ vulnerabilities (including critical and high severity transitive CVEs).

B. Changes Made

• Recursively updated all package dependencies to their latest secure versions via pnpm update.
• Moved eslint-plugin-promise from production dependencies to devDependencies across 50 packages.
• Replaced mkdirp with native fs.promises.mkdir in convert-images sample.
• Removed unused/deprecated request and request-promise from remote-config-diff sample.
• Replaced lodash with native array methods in image-maker sample.

C. Remaining CVEs

• None or transitive dependencies constrained by upstream peer/semver limits.

D. Introduced CVEs

• None.

E. Testing Strategy

• Ran existing unit and integration test suites: 100% passing.
• Executed automated linter: 100% passing.

Release Notes

relnote: chore: update dependencies to close transitive CVEs for Node-1st-gen

[gemini-code-assist]

Note

The number of changes in this pull request is too large for Gemini Code Assist to generate a review.

[wiz-9635d3485b]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	1
Sensitive Data	-
Secrets	-
IaC Misconfigurations	-
SAST Findings	-
Software Management Findings	-
Total	1

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.