Merge pull request #1683 from snyk/CN-1323-vuln-fixes

fix: vuln fixes — on-call sweep [CN-1323]

Author: parker-snyk

.snyk

@@ -138,4 +138,19 @@ ignore:
           npm/apk update. Re-verify on image refresh.
         expires: 2026-04-23T12:00:00.000Z
         created: 2026-03-24T12:00:00.000Z
+  SNYK-JS-INFLIGHT-6095116:
+    - '*':
+        reason: "No non-major fix available as of 2026-05-19; revisit in 7 days"
+        expires: '2026-05-26T00:00:00.000Z'
+        created: '2026-05-19T00:00:00.000Z'
+  SNYK-JS-REQUEST-3361831:
+    - '*':
+        reason: "No fix available as of 2026-05-19; request package is deprecated and unmaintained; revisit in 7 days"
+        expires: '2026-05-26T00:00:00.000Z'
+        created: '2026-05-19T00:00:00.000Z'
+  SNYK-JS-UUID-16133035:
+    - '*':
+        reason: "No non-major fix available as of 2026-05-19; fixedIn versions 11.1.1 and 14.0.0 are major bumps from v3; revisit in 7 days"
+        expires: '2026-05-26T00:00:00.000Z'
+        created: '2026-05-19T00:00:00.000Z'
 patch: {}

package-lock.json

@@ -96,18 +96,23 @@
   "snyk": true,
   "overrides": {
     "@kubernetes/client-node": {
-      "ws": "8.17.1",
+      "ws": "^8.20.1",
       "tough-cookie": "4.1.3",
       "form-data": "2.5.5",
-      "qs": "^6.14.2",
-      "ajv": "8.18.0"
+      "qs": "^6.15.2",
+      "ajv": "8.18.0",
+      "fast-uri": "^3.1.2"
     },
     "cross-spawn": "^7.0.5",
     "jsonpath-plus": "10.3.0",
-    "qs": "^6.14.2",
+    "qs": "^6.15.2",
     "fast-xml-parser": "^5.3.6",
+    "fast-xml-builder": "^1.1.7",
     "minimatch": "^10.2.3",
+    "brace-expansion": "^5.0.6",
     "tar": "^7.5.11",
-    "path-to-regexp@^8": "^8.4.0"
+    "path-to-regexp@^8": "^8.4.0",
+    "fast-uri": "^3.1.2",
+    "ws": "^8.20.1"
   }
 }