fix(web): resolve Dependabot npm alerts in package-lock (#515)

Bump brace-expansion, js-yaml, @babel/core, and related transitive deps via npm audit fix. Override nested postcss so Next.js no longer pulls vulnerable 8.4.31 (XSS in CSS stringify output).
2026-07-14 19:01:18 -07:00
parent 1441be0512
commit b9eaae8c29
2 changed files with 185 additions and 236 deletions
@@ -56,5 +56,8 @@
    "prettier": "^3.3.2",
    "prettier-plugin-tailwindcss": "^0.6.5",
    "ts-node": "^10.9.2"
+  },
+  "overrides": {
+    "postcss": "$postcss"
  }
 }