chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 5 open Dependabot security alerts by forcing patched versions of vulnerable transitive dependencies via yarn resolutions.

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#242	shell-quote	critical	Bumped to 1.8.4 via resolution (was 1.8.1, transitive of concurrently)
#238	tmp	high	Bumped resolution from 0.2.5 to ^0.2.6 (resolves to 0.2.7)
#237	yeoman-environment	high	Bumped to ^6.0.1 (resolves to 6.1.0) via resolution (transitive of oclif)
#236	uuid	medium	Bumped uuid@npm:8.0.0 to ^11.1.1 via resolution (transitive of aws-sdk under oclif)
#213	ip-address	medium	Added ^10.1.1 resolution (resolves to 10.2.0; previously socks pulled vulnerable 9.0.5)

Notes

• All affected packages are transitive; fixes applied via resolutions in package.json.
• yeoman-environment, uuid, and aws-sdk are all pulled in by the oclif devDependency (release tooling), so these changes are build/publish-time only.
• Verified: yarn build, yarn lint, and yarn test:ci (189 + 4 tests passing). The 5 pre-existing no-undef lint errors in scripts/generate-shrinkwrap.js are unrelated to this change and present on main.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	devcycle-mcp-server	b495309	Jun 10 2026, 01:38 PM

[Copilot]

Pull request overview

Resolves multiple Dependabot security alerts by overriding vulnerable transitive dependencies via Yarn resolutions, updating the lockfile to reflect the patched dependency graph.

Changes:

• Added/updated Yarn resolutions to force patched versions of vulnerable transitive packages (e.g., tmp, shell-quote, yeoman-environment, uuid, ip-address).
• Regenerated yarn.lock to incorporate the new resolved versions and their updated transitive trees.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 3 comments.

File	Description
package.json	Adds/updates Yarn resolutions entries to force patched transitive dependency versions.
yarn.lock	Updates the resolved dependency graph and checksums based on the new resolutions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.