chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 7 open Dependabot security alerts by adding yarn resolutions for vulnerable transitive dependencies

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#309	shell-quote	critical	Resolution ^1.11.0 (1.12.0)
#307	source-map-js	high	Resolution ^1.2.2 (1.2.2)
#306	proxy-addr	critical	Resolution ^2.0.8 (2.0.8)
#305	compression	high	Resolution ^1.8.2 (1.8.2)
#304	postcss-selector-parser	medium	Single resolution ^7.1.6, replacing 6.x pins
#303, #302	tinypool	critical	Resolution ^2.1.2 (2.2.0)

yarn build passes.

[Copilot]

🟡 Changes recommended

Two resolutions force unsupported major versions into consumers that still declare older dependency ranges.

2 open findings

• Forced PostCSS parser v7 breaks v6-dependent packages · New
• Docusaurus uses unsupported Tinypool major version · New

What changed in this PR

Updates Yarn resolutions to address seven Dependabot alerts affecting transitive dependencies.

Changes:

• Pins six vulnerable packages to patched versions.
• Regenerates the Yarn lockfile with resolved versions and checksums.

File	Description
package.json	Adds patched dependency resolutions.
yarn.lock	Records the resolved dependency versions.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[cloudflare-workers-and-pages]

Deploying devcycle-docs with    Cloudflare Pages

Latest commit:	e04420e
Status:	✅  Deploy successful!
Preview URL:	https://bdec9500.devcycle-docs.pages.dev
Branch Preview URL:	https://chore-dependabot-alerts.devcycle-docs.pages.dev

View logs