chore(deps): execute npm audit fix

[MikeMcC399]

Situation

npm audit and Dependabot report multiple vulnerabilities:

$ npm audit
# npm audit report

brace-expansion  5.0.2 - 5.0.5
Severity: moderate
brace-expansion: Large numeric range defeats documented `max` DoS protection - https://github.com/advisories/GHSA-jxxr-4gwj-5jf2
fix available via `npm audit fix`
node_modules/@eslint/config-array/node_modules/brace-expansion

js-yaml  <=4.1.1
Severity: moderate
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases - https://github.com/advisories/GHSA-h67p-54hq-rp68
fix available via `npm audit fix`
node_modules/js-yaml

undici  7.0.0 - 7.27.2
Severity: high
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent - https://github.com/advisories/GHSA-vmh5-mc38-953g
undici vulnerable to cross-user information disclosure via shared cache whitespace bypass - https://github.com/advisories/GHSA-pr7r-676h-xcf6
fix available via `npm audit fix`
node_modules/cheerio/node_modules/undici

3 vulnerabilities (2 moderate, 1 high)

To address all issues, run:
  npm audit fix

Change

Execute npm audit fix to remediate the vulnerabilities.

---

Note

Low Risk
Lockfile-only transitive dev dependency patches with no application source changes; residual risk is limited to tooling/runtime behavior of those packages.

Overview
Security remediation via npm audit fix, reflected only in package-lock.json (no direct package.json dependency changes).

Transitive dev dependencies are bumped to patched versions: brace-expansion 5.0.5 → 5.0.6 (under @eslint/config-array), js-yaml 4.1.1 → 4.2.0, and undici 7.24.1 → 7.28.0 (under cheerio). These address the reported moderate DoS issues and high-severity undici TLS/cache advisories.

^{Reviewed by Cursor Bugbot for commit 8ac2247. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cypress-app-bot]

• Create a Draft Pull Request if your PR is not ready for review. Mark the PR as Ready for Review when you're ready for a Cypress team member to review the PR.

[github-actions]

🎉 This PR is included in version 7.4.1 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀