chore: resolve open dependabot security alerts

[jonathannorris]

Summary

Resolved 7 open Dependabot security alerts by bumping vulnerable transitive dependencies in the lockfile.

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#106	esbuild	high	Bumped to 0.28.1 via overrides (pinned by @angular/build & vite)
#105	esbuild	low	Bumped to 0.28.1 via overrides
#104	hono	medium	Bumped to 4.12.25 via npm update
#103	hono	medium	Bumped to 4.12.25 via npm update
#102	hono	medium	Bumped to 4.12.25 via npm update
#101	hono	medium	Bumped to 4.12.25 via npm update
#100	tmp	high	Bumped to 0.2.7 via npm update

All packages are transitive dependencies. hono and tmp were resolved via a plain lockfile update; esbuild required a scoped override since it is pinned by @angular/build and vite. Production build verified passing.

[gemini-code-assist]

Code Review

This pull request updates several dependencies, notably upgrading esbuild to 0.28.1, hono to 4.12.25, and tmp to 0.2.7, and adds an esbuild override in package.json. The feedback recommends restricting the esbuild override to ^0.28.1 instead of >=0.28.1 to prevent potential breaking changes from future minor version updates in the 0.x range.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[Copilot]

Pull request overview

This PR addresses Dependabot security alerts by updating vulnerable transitive dependencies, primarily via a lockfile refresh and an overrides entry to force a non-vulnerable esbuild version.

Changes:

• Added an overrides rule for esbuild in package.json.
• Updated package-lock.json to bump esbuild (and platform-specific @esbuild/* packages) to 0.28.1.
• Updated package-lock.json to bump hono to 4.12.25 and tmp to 0.2.7.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Adds an overrides entry intended to ensure a secure esbuild version is used.
package-lock.json	Updates resolved transitive dependency versions to remediate the referenced security alerts.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.