fix(deps): resolve npm security advisories

[GeiserX]

Summary

• update transitive development dependencies to patched compatible releases
• remediate js-yaml GHSA-5p4m-2wfm-xmqj by updating 4.3.0 to 4.3.1
• remediate remaining npm audit findings by updating brace-expansion 1.1.16 to 1.1.18 and nanoid 3.3.16 to 3.3.18
• keep the change lockfile-only because the existing parent dependency ranges permit every patched version

Verification

• npm ci --ignore-scripts
• npm audit — 0 vulnerabilities
• npm test — 92 files, 1,768 tests passed
• npm run lint
• npm run typecheck
• npm run typecheck:tests
• npm run build

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 25e7e11b-753d-48eb-906d-507c6159eb2c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}