chore(deps): override fast-uri, js-yaml, deepmerge-ts to patched versions

[SavioBS629]

What

Pin three transitive dependencies to patched versions via npm overrides, clearing known high-severity advisories:

Package	Pulled by	Was	Now	Advisory fixed
fast-uri	ajv ← @modelcontextprotocol/sdk	3.1.5	3.1.7	host-confusion + SSRF (affects 3.0.0–3.1.5)
js-yaml	eslint (dev-only)	4.3.1	4.3.2	maxTotalMergeKeys CPU exhaustion (affects 4.0.0–4.3.1)
deepmerge-ts	@wdio/config / @wdio/utils ← webdriverio	7.1.5	8.0.2	recursive-object stack exhaustion (affects <8.0.0)

Risk

• fast-uri and js-yaml are patch bumps — negligible risk.
• deepmerge-ts is a major bump (7 → 8) forced past @wdio's declared ^7.0.3. deepmerge-ts@8 requires node >=16.9.0 (satisfied). Lint, tsc --noEmit, and the full test suite pass unchanged (5 pre-existing fake-timer flakes in buildFailureThemes / tfaRcaCollaboration are present on main and unaffected).

Testing

npm install → npm run lint → tsc --noEmit → npx vitest run: all green except the pre-existing unrelated flakes noted above. npm audit confirms the three advisories are cleared.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited), Workspace UI (inherited)

Review profile: ASSERTIVE

Plan: Enterprise

Run ID: 0b028921-9790-4d93-a9da-378652a1be83

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}