[setu4993]

Replaces the open Dependabot PRs (#61, #76) with one dependency refresh that clears most of the repo's open Dependabot security alerts.

Changes

• Lockfile refresh within existing ranges. Ran pnpm update -r --depth Infinity, so transitive deps move to the latest versions their current semver ranges allow. Accounts for most of the pnpm-lock.yaml diff.
• packages/vscode: esbuild ^0.25.0 → ^0.28.1. Covers chore(deps-dev): bump esbuild from 0.24.2 to 0.28.1 #61 and matches agentforce / lsp-browser, which are already on ^0.28.1.
• packages/compile-server: OpenTelemetry bumps
  • @opentelemetry/auto-instrumentations-node ^0.76.0 → ^0.81.0
  • @opentelemetry/exporter-trace-otlp-http ^0.218.0 → ^0.223.2
  • @opentelemetry/sdk-node ^0.218.0 → ^0.223.2
  • @opentelemetry/api ^1.9.1 → ~1.9.1 (see below)
• pnpm-workspace.yaml overrides for packages pinned to vulnerable versions by upstream deps:
  • dompurify@<3.4.17: ^3.4.17: monaco-editor and @codingame/monaco-vscode-api pin dompurify 3.1.x / 3.3.x.
  • postcss-selector-parser@6.0.10: ^6.1.6: @tailwindcss/typography pins 6.0.10 exactly.
• Root package.json: prettier ^3.8.3 → ~3.8.3. The refresh would otherwise resolve prettier 3.10.x, which reformats 52 files and fails format:check. Upgrading prettier should be its own PR.

Not included: react-router 8.x (#76). It's a major version and no alert requires it, so react-router stays on 7.18.x.

Security alerts

Checked each open alert's vulnerable range against the resolved versions in the new lockfile: 173 of 182 alerts are fixed.

The 9 left are all transitive deps of Docusaurus 3.10.2. They only affect the docs site build and don't ship in any published @sf-agentscript/* package. Docusaurus has no release that fixes them yet, and forcing them through overrides would mean pushing webpack-dev-server / workbox internals across major versions.

Package	Resolved	Alerts	Path
tinypool	1.1.1	2 (critical)	Docusaurus build
serialize-javascript	6.0.2	3	webpack / terser plugin
uuid	8.3.2	1	sockjs → webpack-dev-server
deepmerge	4.3.1	1	no patched version published
glob	10.x / 12.x / 13.x	1	Docusaurus tooling
minimatch	9.x / 10.x	1	Docusaurus tooling

Verification

Run locally on this branch, rebased on main (34c96ff):

• pnpm install --frozen-lockfile
• pnpm lint, pnpm typecheck
• pnpm test: all packages pass, e.g. parser-javascript 1517, language 484, compiler 1327, agentforce-dialect 1096, agentscript-dialect 1675
• pnpm build
• Docs: code-block validation and path-traversal checks pass
• pnpm format:check: the only failures are in the generated apps/docs/.docusaurus/* files, the same as on main. They don't exist on a clean CI checkout.
• compile-server smoke test: started the built server with the new OpenTelemetry SDK. It started, recorded a traced request, and /health returned {"status":"OK"}.

Reviewer notes

• dompurify override: this moves Monaco's sanitizer from 3.1.x/3.3.x to 3.4.17. Automated checks pass, but a quick browser check of the playground / editor (hover cards, markdown rendering) would be worthwhile.
• OpenTelemetry: these are pre-1.0 minor bumps, where breaking changes are allowed. The startup smoke test passed. @opentelemetry/api is capped at ~1.9.1 because sdk-node 0.223 declares a peer of api <1.10.0. auto-instrumentations stops at 0.81 because 0.82+ moves to the OpenTelemetry core 3.x / api 1.10 line, which would be a bigger migration.
• Prettier cap: ~3.8.3 is intentional (see above).

Once this merges, Dependabot should close #61 and #76 automatically. If it doesn't, I'll close them by hand.