fix: update yarn resolutions to patch open Dependabot alerts

[jonathannorris]

Summary

• Adds resolutions entries in package.json to force patched versions of all 10 open Dependabot alerts
• Regenerates yarn.lock with the fixed versions

Packages updated:

Package	From	To	Severity
path-to-regexp	0.1.12	0.1.13	High
serialize-javascript	7.0.3	7.0.5	Medium
brace-expansion (1.x)	1.1.12	1.1.13	Medium
brace-expansion (2.x)	2.0.2	2.0.3	Medium
yaml (1.x)	1.10.2	1.10.3	Medium
yaml (2.x)	2.8.1	2.8.3	Medium
picomatch (2.x)	2.3.1	2.3.2	High/Medium
picomatch (4.x)	4.0.3	4.0.4	High/Medium

[cloudflare-workers-and-pages]

Deploying devcycle-docs with    Cloudflare Pages

Latest commit:	6c01230
Status:	✅  Deploy successful!
Preview URL:	https://9f29b5c0.devcycle-docs.pages.dev
Branch Preview URL:	https://fix-dependabot-alerts.devcycle-docs.pages.dev

View logs

[Copilot]

Pull request overview

This PR aims to address Dependabot security alerts in the docs site by forcing patched transitive dependency versions via Yarn resolutions, and then regenerating the lockfile to reflect those overrides.

Changes:

• Add/update package.json resolutions to pin patched versions for several vulnerable transitive dependencies.
• Regenerate yarn.lock to apply the new resolution results.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Adds new resolutions overrides (and bumps serialize-javascript) to force patched versions.
yarn.lock	Updated lockfile entries reflecting the new resolution/pinning outcomes.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The resolutions entry for path-to-regexp is currently global (no range selector), which forces all consumers onto 0.1.13. In this lockfile, react-router@5.3.4 requests path-to-regexp@^1.7.0 and serve-handler@6.1.7 requests path-to-regexp@3.3.0; pinning both to 0.1.x is very likely to be a breaking change at runtime. Please scope this resolution to only the vulnerable 0.1.12 line (e.g., match ~0.1.12) so that 1.x/3.x consumers keep their compatible major versions.

Suggested change

	"path-to-regexp": "0.1.13",
	"path-to-regexp@~0.1.12": "0.1.13",