fix(deps): update basic-ftp to 5.2.1 (GHSA-chqc-8p9q-pq6q)

[github-actions]

Description

Refs Dependabot Alert #1412

Resolves HIGH severity CRLF injection vulnerability in basic-ftp@5.2.0 (GHSA-chqc-8p9q-pq6q, CVSS 8.6) by updating to 5.2.1.

basic-ftp is a transitive dependency (puppeteer → @puppeteer/browsers → proxy-agent → pac-proxy-agent → get-uri → basic-ftp). Since get-uri@6.0.5 specifies basic-ftp: ^5.0.2, regenerating the lockfile was sufficient to pick up 5.2.1 — no pnpm override was needed.

Changes Made

• Regenerated pnpm-lock.yaml to resolve basic-ftp@5.2.1 (previously 5.2.0)
• Deleted scaffold file .github/dependabot-alerts/alert-1412.md

Testing

• pnpm install succeeds and lockfile resolves basic-ftp@5.2.1
• Pre-commit hooks pass
• CI checks pass

Link to Devin session: https://app.devin.ai/sessions/61725b6a88614f7ba6f7346d2ba06e59

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[devin-ai-integration]

@davidkonigsberg — updated: removed the override per your suggestion. Simply regenerating the lockfile was sufficient since get-uri@6.0.5 specifies basic-ftp: ^5.0.2, which allows 5.2.1. The PR now only changes the lockfile (+ scaffold deletion). All CI checks pass. Ready for review.