chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 9 open Dependabot security alerts by bumping vulnerable transitive dependencies via yarn resolutions

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#267	browserslist	high	Bumped to 4.28.7+ via resolutions
#266	browserslist	high	Bumped to 4.28.7+ via resolutions
#265	fast-uri	high	Bumped to 3.1.6+ via resolutions
#264	fast-uri	high	Bumped to 3.1.6+ via resolutions
#263	qs	medium	Bumped to 6.16.0+ via resolutions
#262	fast-uri	high	Bumped to 3.1.6+ via resolutions
#261	fast-uri	high	Bumped to 3.1.6+ via resolutions
#260	postcss-selector-parser (v6 line)	low	Bumped to 6.1.3+ via scoped resolutions
#259	postcss-selector-parser (v7 line)	low	Bumped to 7.1.3+ via scoped resolutions

All affected packages are transitive dependencies. Verified with yarn why that all now resolve to patched versions, and confirmed yarn build completes successfully.

[Copilot]

🟢 Approval recommended

The changes are limited to dependency resolution/lockfile updates and the updated lock entries consistently reflect the intended patched versions.

Pull request overview

This PR addresses outstanding Dependabot security alerts by forcing patched versions of vulnerable transitive dependencies using Yarn resolutions, with corresponding updates reflected in yarn.lock.

Changes:

• Updated resolutions in package.json to bump qs, fast-uri, browserslist, and postcss-selector-parser (scoped for both v6 and v7 lines).
• Regenerated yarn.lock so the dependency graph resolves to the patched versions (and associated updated transitive packages like caniuse-lite, electron-to-chromium, node-releases, and update-browserslist-db).

File summaries

File	Description
package.json	Adds/updates Yarn resolutions to enforce patched transitive dependency versions tied to the reported alerts.
yarn.lock	Locks the resolved dependency graph to the bumped versions (including updated transitive dependencies introduced by the bumps).

Review details

• Files reviewed: 1/2 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[cloudflare-workers-and-pages]

Deploying devcycle-docs with    Cloudflare Pages

Latest commit:	ad7056e
Status:	✅  Deploy successful!
Preview URL:	https://4703c03f.devcycle-docs.pages.dev
Branch Preview URL:	https://chore-dependabot-alerts.devcycle-docs.pages.dev

View logs