fix(deps): vuln svgo (patch → 4.0.2) [packages/react-native-babel-plugin]

[gh-worker-campaigns-3e9aa4]

Summary: High-severity security update — 1 package upgraded (patch changes only)

Manifests changed:

• packages/react-native-babel-plugin (yarn)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
svgo	4.0.1	4.0.2	patch	Direct	1 HIGH

---

Security Details

🚨 Critical & High Severity (1 fixed)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In	Case
svgo	GHSA-2p49-hgcm-8545	HIGH	SVGO removeScripts plugin leaves some executable scripts intact	4.0.1	2.8.3	-

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI
• Approve and merge this PR

---

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

This PR updates the svgo dependency used by the React Native Babel plugin and refreshes the Yarn lockfile to reflect the new resolution (and associated transitive dependency updates).

Changes:

• Bump svgo from ^4.0.1 to ^4.0.2 in packages/react-native-babel-plugin.
• Regenerate yarn.lock, pulling in multiple transitive updates (notably Babel/tooling and some npmcli packages).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
yarn.lock	Updates resolved versions/checksums for svgo and many transitive dependencies after reinstall/update.
packages/react-native-babel-plugin/package.json	Bumps svgo dependency to ^4.0.2.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[gh-worker-campaigns-3e9aa4]

Auto-rebase complete

Branch is up to date with develop — rebased onto a9111a7.

---

_{Auto-Rebase · Add no-auto-rebase to opt out}

[Copilot]

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.

Suppressed comments (1)

packages/react-native-babel-plugin/package.json:53

• This PR’s functional change appears to be a small svgo bump, but the accompanying yarn.lock diff includes a large number of unrelated transitive upgrades/dedupes. If the intent is only to update svgo, consider regenerating the lockfile in a way that minimizes unrelated churn (e.g., updating only svgo and keeping other resolutions stable) to reduce review risk and make future bisects easier.

        "@babel/traverse": "^7.28.6",
        "@babel/types": "^7.27.7",
        "fast-glob": "^3.3.3",
        "svgo": "^4.0.2",
        "uuid": "^8.3.2"