security: automated dependency hardening

[Hardonian]

Automated weekly drift guard.

Before: 2 vulnerabilities found
unknown
After: 2 vulnerabilities found
unknown

Merges via auto-merge-bot once verified.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 92b3438e26

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Regenerate the lockfile after changing overrides

The two new overrides are absent from pnpm-lock.yaml's overrides section. In the inspected TypeScript SDK workflow, .github/workflows/ci.yml:139 runs pnpm install --frozen-lockfile; executing that command against this commit reproduces ERR_PNPM_LOCKFILE_CONFIG_MISMATCH before dependencies can be installed, so the TypeScript CI job cannot run. Regenerate and commit the lockfile with these override settings.

AGENTS.md reference: AGENTS.md:L65-L65

Useful? React with 👍 / 👎.

[kilo-code-bot]

Code Review Summary

Status: 2 Issues Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	1
WARNING	1

Issue Details (click to expand)

CRITICAL

File	Line	Issue
package.json	79	Regenerate lockfile after changing overrides - two new overrides are absent from pnpm-lock.yaml, causing pnpm install --frozen-lockfile to fail with ERR_PNPM_LOCKFILE_CONFIG_MISMATCH

WARNING

File	Line	Issue
package.json	79	Conflicting postcss overrides - the new postcss@<=8.5.22: >=8.5.23 range override conflicts with the existing postcss: 8.5.18 plain override on line 75, creating inconsistent resolution behavior

Files Reviewed (1 files)

• package.json - 2 issues

Fix these issues in Kilo Cloud

---

_{Reviewed by step-3.7-flash · Input: 79.4K · Output: 19.5K · Cached: 541.2K}