chore(deps): resolve npm audit vulnerabilities

[dgreif]

Summary

npm audit currently reports seven vulnerabilities (5 high, 1 moderate, 1 low) in transitive dependencies. This updates the lockfile to patched releases so installs audit cleanly.

• Updates vulnerable brace-expansion, fast-uri, js-yaml, and shell-quote paths.
• Overrides Mocha's diff and serialize-javascript dependencies because Mocha 11's declared ranges do not include the patched major versions.
• Removes the obsolete randombytes and safe-buffer transitive dependencies through the serialize-javascript update.

Validation

• npm ci
• npm test (67 passing)
• npm audit (0 vulnerabilities)

Notes

TypeScript 7 from #719 is intentionally not included. The latest typescript-eslint release only supports TypeScript <6.1, and the upgrade currently breaks eslint-doc-generator.

[Copilot]

Pull request overview

Updates transitive dependencies to patched versions so npm audit reports no vulnerabilities.

Changes:

• Overrides Mocha’s vulnerable dependencies with patched major versions.
• Refreshes vulnerable transitive packages and removes obsolete dependencies.

Show a summary per file

File	Description
package.json	Adds scoped Mocha dependency overrides.
package-lock.json	Locks patched transitive dependency versions.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 1/2 changed files
• Comments generated: 0
• Review effort level: Medium