[maffkipp]

Description

Updates multiple package resolutions that were flagged by yarn audit because of security vulnerabilities

Motivation and Context

Resolves BED-9026

How Has This Been Tested?

Screenshots (optional):

Types of changes

• Chore (a change that does not modify the application functionality)

Checklist:

• I have met the contributing prerequisites
  • Assigned myself to this PR
  • Added the appropriate labels
  • Associated an issue: Issues and Pull Requests README #672
  • Read the Contributing guide: https://github.com/SpecterOps/BloodHound/wiki/Contributing
• I have ensured that related documentation is up-to-date
  • Open API docs
  • Code comments (GoDocs / JSDocs)
• I have followed proper test practices
  • Added/updated tests to cover my changes
  • All new and existing tests passed

Summary by CodeRabbit

• Chores
  • Updated bundled dependency versions for improved compatibility and maintenance.
  • Added resolutions for several transitive packages and refreshed existing package resolutions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: f9f5e017-5cb8-4ec0-bb35-577dcc64c012

📥 Commits

Reviewing files that changed from the base of the PR and between 8f1e747 and d8c3aec.

⛔ Files ignored due to path filters (10)

• .yarn/cache/axios-npm-1.16.1-c946e2f9bd-9b6218cf96.zip is excluded by !**/.yarn/**, !**/*.zip
• .yarn/cache/axios-npm-1.18.1-cfe396e04f-c4cdced3ee.zip is excluded by !**/.yarn/**, !**/*.zip
• .yarn/cache/brace-expansion-npm-5.0.5-b81f6c30d6-f259b2ddf0.zip is excluded by !**/.yarn/**, !**/*.zip
• .yarn/cache/brace-expansion-npm-5.0.7-48dc108338-98c12de33f.zip is excluded by !**/.yarn/**, !**/*.zip
• .yarn/cache/js-yaml-npm-4.1.0-3606f32312-c138a34a3f.zip is excluded by !**/.yarn/**, !**/*.zip
• .yarn/cache/js-yaml-npm-4.1.1-86ec786790-a52d0519f0.zip is excluded by !**/.yarn/**, !**/*.zip
• .yarn/cache/js-yaml-npm-4.3.0-1586601382-2bcec3a811.zip is excluded by !**/.yarn/**, !**/*.zip
• .yarn/cache/tar-npm-7.5.11-c176cc1bb0-fb2e77ee85.zip is excluded by !**/.yarn/**, !**/*.zip
• .yarn/cache/tar-npm-7.5.19-667b5539a6-0b06a0917f.zip is excluded by !**/.yarn/**, !**/*.zip
• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

• package.json

---

📝 Walkthrough

Walkthrough

Updates package dependency resolutions by bumping axios and tar, and adding resolutions for brace-expansion and js-yaml.

Changes

Dependency resolution updates

Layer / File(s)	Summary
Update package resolutions package.json	axios is updated to ^1.18.0, tar to 7.5.19, and resolutions for brace-expansion (^5.0.7) and js-yaml (^4.3.0) are added.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested labels: javascript

Suggested reviewers: thenando

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title is concise and accurately reflects the dependency-resolution vulnerability update.
Description check	✅ Passed	The description matches the template and covers the change, motivation, type, and checklist, though the testing section is empty.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch BED-9026--yarn-audit-fix

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}