chore: update dependencies

[bryce-seefieldt]

for shell-quote, minimatch, js-yaml, and websocket-driver

Summary

This pull request updates several dependencies to address security vulnerabilities and ensure compatibility with newer versions. The main changes involve upgrading js-yaml, shell-quote, websocket-driver, and brace-expansion to more recent versions, and updating related dependency overrides and snapshots.

Dependency Upgrades and Security:

• Upgraded js-yaml to version 5.2.1 across all references, replacing older versions and updating dependency overrides to enforce this minimum version. This addresses known vulnerabilities in previous releases. [1] [2] [3] [4] [5] [6] [7] [8] [9]
• Upgraded shell-quote to 1.10.0 and updated overrides to ensure older, vulnerable versions are not used. [1] [2] [3] [4] [5]
• Upgraded websocket-driver to 0.7.5 and added an override to enforce this minimum version, addressing security issues. [1] [2] [3] [4] [5] [6]
• Upgraded brace-expansion (used by minimatch@3) to 1.1.16 to address vulnerabilities, and updated all references accordingly. [1] [2] [3] [4] [5]

Dependency Cleanup:

• Removed unused or legacy dependencies such as argparse@1.0.10, esprima@4.0.1, and sprintf-js@1.0.3 from the lockfile, as they are no longer required by the updated packages. [1] [2] [3] [4] [5] [6]

These changes collectively improve the security and maintainability of the project by ensuring that only safe and up-to-date versions of critical dependencies are used.

Scope

• Docs content update
• New section/folder (category + index hub)
• Templates / style guide
• CI/CD / workflows
• Security / threat model / SDLC controls
• Operations / runbooks / IR / DR

Evidence

• ci / quality passed (lint, typecheck, format)
• ci / build passed (Docusaurus build + broken links check)
• codeql checks passed
• pnpm policy:check reviewed (non-blocking drift warnings triaged)
• Includes closing keyword for linked issue (e.g., Closes chore(deps-dev)(deps-dev): bump the npm-minor-patch group with 2 updates #123)
• Policy warnings triage summary:
• Links / screenshots / notes:

Nav / Structure

• New/updated folders include _category_.json or _category_.yml
• New section has an index hub (generated-index or curated index doc)
• Sidebars/autogenerated navigation renders correctly

Security

• No secrets added (confirmed)
• New/updated MDX reviewed as code (if applicable)
• Hosting header changes validated (if applicable)
• If security-relevant: threat model / controls updated or issue created
  • Link to update/issue:

Quality checklist

• Front matter included (title, description, tags; sidebar fields if needed)
• Uses standard page structure (Purpose / Scope / Procedure / Validation / Troubleshooting / Refs)
• Commands are copy/paste safe and specify shell (bash/powershell)
• Any destructive steps include rollback guidance

Notes for reviewers (optional)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
portfolio-docs	Ready	Preview, Comment	Jul 21, 2026 7:05pm