fix(deps): resolve npm audit and Dependabot vulnerabilities

[gkrajniak]

Summary

Resolves the open Dependabot alerts and the npm audit findings in all three packages. After the change, npm audit reports 0 vulnerabilities in eslint-config-typescript, config-prettier and gha-cache.

eslint-config-typescript (lockfile update, npm audit fix)

• brace-expansion 1.1.18 → 1.1.21, 2.1.4 → 5.0.12
• @angular/cli 22.1.4 → 22.2.2 (transitive), which replaces @modelcontextprotocol/sdk 1.30.0 with @modelcontextprotocol/server 2.3.1 and drops the express stack it pulled in (proxy-addr 2.0.7, ip-address 10.5.0)
• typescript-eslint 8.24.1 → 8.71.1, which no longer pulls in fast-glob/micromatch/braces 3.0.3

config-prettier (lockfile update, npm audit fix)

• brace-expansion 2.1.4 → 2.1.7

gha-cache (override)

• undici 6.28.0 → 6.28.1: the existing overrides entry pinned the vulnerable 6.28.0; raised to the first patched version

Verification

npm ci, npm install, build and test pass in every package. The packages have no real tests (test scripts are stubs).

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: b254341f-a160-4659-9ffd-3f45be5ae4e9

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}