fix(js): refresh npm audit remediation in #651

[Siddhant-K-code]

Description

Updates the source branch for #651 with the current audit remediation:

• merges current main, including the existing fast-uri 3.1.5 fix
• resolves the lockfile conflict using main's patched dependency resolutions
• raises the js-yaml override from ^4.3.0 to ^4.3.1, the first version outside the latest advisory range

Merging this PR updates #651 directly. A direct push to the upstream source branch was not permitted for the current contributor credentials.

Testing

Using Node 24.19.0 and npm 11.17.0:

• npm ci
• npm audit — 0 vulnerabilities
• npm run lint
• npm run format:check
• npm run typecheck
• npm run build:light
• npm test -- --runInBand — 666 passed, 27 skipped

[linux-foundation-easycla]

• ✅ login: Siddhant-K-code / name: Siddhant Khare (6f9e5a8, dc77db5)
• ✅ login: dependabot[bot] / name: dependabot[bot] (7a991c4, db371bf)
• ❌ The email address for the commit (7a991c4) is not linked to the GitHub account, preventing the EasyCLA check. Consult this Help Article and GitHub Help to resolve. (To view the commit's email address, add .patch at the end of this PR page's URL.) For further assistance with EasyCLA, please visit our EasyCLA portal and chat with our support bot.
• ❌ - login: @oai-codex / name: Codex. The commit (dc77db5) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please visit our EasyCLA portal and chat with our support bot.

One or more co-authors of this pull request were not found. You must specify co-authors in commit message trailer via:

Co-authored-by: name <email>

Supported Co-authored-by: formats include:

1. Anything <id+login@users.noreply.github.com> - it will locate your GitHub user by id part.
2. Anything <login@users.noreply.github.com> - it will locate your GitHub user by login part.
3. Anything <public-email> - it will locate your GitHub user by public-email part. Note that this email must be made public on Github.
4. Anything <other-email> - it will locate your GitHub user by other-email part but only if that email was used before for any other CLA as a main commit author.
5. login <any-valid-email> - it will locate your GitHub user by login part, note that login part must be at least 3 characters long.

Alternatively, if the co-author should not be included, remove the Co-authored-by: line from the commit message.

Please update your commit message(s) by doing git commit --amend and then git push [--force] and then request re-running CLA check via commenting on this pull request:

/easycla

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 6b6a555b-318d-44dd-9f21-73236cda3850

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[SoulPancake]

Might need to rebase and amend author
Although I believe we should also add codex to EasyCLA thing like we do for Copilot

[Siddhant-K-code]

Although I believe we should also add codex to EasyCLA thing like we do for Copilot

We need to raise request to CNCF about that!