chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 8 open Dependabot security alerts in test/angular-integration by bumping vulnerable npm dependencies

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#77	fast-uri	high	Bumped override to 3.1.6
#78	fast-uri	high	Bumped override to 3.1.6
#79	fast-uri	high	Bumped override to 3.1.6
#80	fast-uri	high	Bumped override to 3.1.6
#82	browserslist	high	Added override pinning to 4.28.7
#83	@vitest/mocker	medium	Bumped to 4.1.11
#84	vitest	medium	Bumped to 4.1.11
#85	baseline-browser-mapping	medium	Resolved to 2.11.21 (satisfies patched range via lockfile refresh)

🤖 Generated with Claude Code

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: c4005012-f37c-4d56-9066-097a7a771e34

📥 Commits

Reviewing files that changed from the base of the PR and between a821f16 and 9e66094.

⛔ Files ignored due to path filters (1)

• test/angular-integration/package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• test/angular-integration/package.json

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The Angular integration package configuration pins browserslist to 4.28.7 and updates the fast-uri override to 3.1.6. The esbuild override remains unchanged.

Changes

Angular integration dependencies

Layer / File(s)	Summary
Update dependency overrides test/angular-integration/package.json	Pins browserslist to 4.28.7 and updates fast-uri from 3.1.5 to 3.1.6. The esbuild override remains ^0.28.1.

Priority: ⬆️ High

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 9e660

This updates the Angular integration dependency resolutions to patched browserslist and fast-uri versions. The pinned versions are reflected in the lockfile, with no current merge-blocking risk identified.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	The linked issue is a release automation record and specifies no requirements for these dependency security updates. The reviewed changes match the stated security remediation objectives.
Out of Scope Changes check	✅ Passed	The reviewed changes only update dependency overrides for the five stated security alerts. No unrelated code changes are present.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Title check	✅ Passed	The title clearly identifies the main change: resolving Dependabot security alerts through dependency updates.
Description check	✅ Passed	The description directly relates to the dependency security updates in the changeset and provides relevant alert and package details.

---

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Copilot review overview

🟢 Approval recommended

The security overrides and resolved lockfile entries are consistent and compatible with their dependency constraints.

Review effort: Balanced
Findings: None

What changed in this PR

Updates Angular integration dependencies to resolve reported security alerts.

Changes:

• Pins browserslist to 4.28.7.
• Upgrades fast-uri to 3.1.6.
• Refreshes the lockfile and related transitive dependencies.

File	Description
test/​angular-integration/​package.json	Adds secure dependency overrides.
test/​angular-integration/​package-lock.json	Locks updated dependency versions and integrity metadata.

Files not reviewed (1)

• test/angular-integration/package-lock.json: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.