chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 3 open Dependabot security alerts by bumping vulnerable transitive dependencies via yarn resolutions

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#49	fast-uri	high	Bumped resolution to ^3.1.4 (host confusion via literal backslash authority delimiter)
#48	fast-uri	high	Bumped resolution to ^3.1.4 (host confusion via failed IDN canonicalization)
#47	js-yaml	medium	Added resolution ^4.2.0 (quadratic-complexity DoS in merge key handling)

Test plan

• yarn install regenerates yarn.lock with patched versions of fast-uri (3.1.4) and js-yaml (4.3.0)
• yarn test passes (52/52 tests)

[Copilot]

Pull request overview

This PR addresses open Dependabot security alerts by updating Yarn resolutions (and the resulting yarn.lock) to force patched versions of vulnerable transitive dependencies.

Changes:

• Bumped the fast-uri resolution to ^3.1.4.
• Added a js-yaml resolution of ^4.2.0 (lockfile resolves to 4.3.0).
• Regenerated yarn.lock to reflect the updated resolved versions.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates Yarn resolutions to enforce patched fast-uri and js-yaml versions.
yarn.lock	Records the updated resolved versions (fast-uri@3.1.4, js-yaml@4.3.0).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.