[Snyk] Fix for 1 vulnerabilities

[Abuchtela]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-QS-14724253	170

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This is a Snyk-automated security PR that addresses a high-severity vulnerability (SNYK-JS-QS-14724253) related to "Allocation of Resources Without Limits or Throttling" in the qs package. The fix involves updating two main dependencies: express from 4.21.2 to 4.22.0 and @lhci/cli from 0.7.2 to 0.8.0.

Key Changes:

• Updates express to 4.22.0 which includes qs 6.14.1 (fixes the vulnerability)
• Updates @lhci/cli to 0.8.0 which transitively updates Lighthouse from 7.3.0 to 8.0.0 (major version bump)
• Removes caret prefix from webdev-infra dependency, pinning it to exact version 1.0.57

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates express (4.21.2→4.22.0) and @lhci/cli (0.7.2→0.8.0) to address qs vulnerability
package-lock.json	Reflects dependency updates including Lighthouse major version upgrade (7.3.0→8.0.0) and numerous transitive dependency updates

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.