chore: Vulnerable transitive dependencies were updated

[cmath10]

The dependency lockfile contained versions affected by 17 open Dependabot alerts. This refreshes the affected transitive packages within their existing semver ranges and also fixes an additional Ajv advisory found by a recursive npm audit. Only yarn.lock changes.

Package	Previous version	Updated version
@humanfs/node	0.16.6	0.16.8
brace-expansion	5.0.4	5.0.12
ip-address	10.1.0	10.7.2
js-yaml	4.1.0	4.3.2
picomatch	4.0.2 / 4.0.3	4.0.7
tar	7.5.10	7.5.22
ajv	6.14.0 / 8.12.0	6.15.0 / 8.20.0

All lockfile versions were checked against the vulnerable ranges in the 17 Dependabot alerts. The full recursive audit went from 23 security advisories to zero. Its remaining finding is an upstream deprecation warning for glob@11.1.0, required by the current @modulify/pkg@1.0.1; no compatible newer 11.x release is available. Dependabot will reassess the alerts after this reaches main.

Validation passed: yarn install --immutable, lint, typecheck, 235 runtime tests with coverage, 52 type tests, yarn test:package (build and packed ESM/CJS consumers), release dry-run, and commitlint. yarn npm audit --all --recursive --no-deprecations --json exited successfully with no security advisories. Independent lockfile review found no actionable issues.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (d6be4b8) to head (34e0dd8).

Additional details and impacted files

@@            Coverage Diff            @@
##              main        #6   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           11        11           
  Lines          851       851           
  Branches       191       191           
=========================================
  Hits           851       851           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.