chore: resolve open dependabot security alerts

[jonathannorris]

Summary

Resolved 3 open Dependabot security alerts by bumping vulnerable transitive dependencies.

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#103	brace-expansion	medium	Bumped to 5.0.6 via yarn resolution (large numeric range defeats documented max DoS protection)
#102	fast-uri	high	Bumped to 3.1.2 via yarn resolution (host confusion via percent-encoded authority delimiters)
#101	fast-uri	high	Bumped to 3.1.2 via yarn resolution (path traversal via percent-encoded dot segments)

Both fast-uri and brace-expansion are transitive dependencies. resolutions entries in package.json force the patched versions.

[Copilot]

Pull request overview

Resolves Dependabot security alerts by pinning the transitive fast-uri dependency to a patched version (≥3.1.2) via a Yarn resolutions entry.

Changes:

• Added fast-uri: ">=3.1.2" to resolutions in package.json.
• Updated yarn.lock so fast-uri resolves to 3.1.2.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Adds Yarn resolution forcing fast-uri to ≥3.1.2 to address the security advisories.
yarn.lock	Reflects the new resolved fast-uri version 3.1.2 with updated checksum.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.