Updates dependencies and fixes js-yaml vulnerability

[alexiswl]

Upgrades various project dependencies to their latest versions, ensuring the project benefits from recent features, bug fixes, and security enhancements. This includes critical updates to CDK libraries, development tools like ESLint and Jest, and TypeScript.

Crucially, this change mitigates a security vulnerability by enforcing js-yaml version 4.1.2 or newer through an explicit override in pnpm-workspace.yaml.

[Copilot]

Pull request overview

Updates dependency versions across the project and attempts to mitigate a js-yaml vulnerability by adding a pnpm override intended to enforce js-yaml >=4.1.2.

Changes:

• Bumped AWS CDK-related dependencies (aws-cdk-lib, constructs, @aws-cdk/aws-lambda-python-alpha) and various dev tools (ESLint, Jest, Prettier, TypeScript ESLint).
• Added a pnpm override intended to force js-yaml versions <=4.1.1 to resolve to ^4.1.2.
• Updated the pnpm-lock.yaml to reflect the dependency upgrades (but currently not the js-yaml override application).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
pnpm-workspace.yaml	Adds an override intended to enforce a non-vulnerable js-yaml version.
pnpm-lock.yaml	Updates lockfile for dependency bumps; currently does not reflect the new js-yaml override/resolution.
package.json	Bumps dependency and devDependency versions (CDK, tooling).

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[victorskl]

reviewing...

[victorskl]

LGTM