From 771dce0e8a10431ec132cf4a1a43df1dfbf511d2 Mon Sep 17 00:00:00 2001
From: Jonathan Norris <jonathan.norris@dynatrace.com>
Date: Tue, 4 Aug 2026 09:32:09 -0400
Subject: [PATCH 1/2] chore: resolve open dependabot security alerts

- postcss 8.5.10 -> 8.5.18 (high, alert #120)
- js-yaml override 4.1.1 -> 4.3.0 (high, alert #119)
- brace-expansion override added >=1.1.16 <2 (high, alert #118)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
---
 package-lock.json | 28 ++++++++++++++--------------
 package.json      |  5 +++--
 2 files changed, 17 insertions(+), 16 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 6fa58a3..adf252c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -29,7 +29,7 @@
         "lucide-react": "^0.503.0",
         "next": "^15.5.21",
         "object-hash": "^3.0.0",
-        "postcss": "^8.5.10",
+        "postcss": "^8.5.18",
         "react": "^18.3.1",
         "react-dom": "^18.3.1",
         "sharp": "^0.35.0",
@@ -4458,9 +4458,9 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.15",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
-      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
+      "version": "1.1.18",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz",
+      "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -8433,9 +8433,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.2.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
-      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "dev": true,
       "funding": [
         {
@@ -8889,9 +8889,9 @@
       }
     },
     "node_modules/nanoid": {
-      "version": "3.3.15",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.15.tgz",
-      "integrity": "sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA==",
+      "version": "3.3.17",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz",
+      "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==",
       "funding": [
         {
           "type": "github",
@@ -9525,9 +9525,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.15",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.15.tgz",
-      "integrity": "sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==",
+      "version": "8.5.25",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz",
+      "integrity": "sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==",
       "funding": [
         {
           "type": "opencollective",
@@ -9544,7 +9544,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.12",
+        "nanoid": "^3.3.16",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },
diff --git a/package.json b/package.json
index 6027ff9..42e433b 100644
--- a/package.json
+++ b/package.json
@@ -34,19 +34,20 @@
     "object-hash": "^3.0.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "postcss": "^8.5.10",
+    "postcss": "^8.5.18",
     "sharp": "^0.35.0",
     "uuid": "^11.1.1"
   },
   "overrides": {
     "protobufjs": "^7.6.5",
     "minimatch": "^3.1.3",
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.3.0",
     "diff": "^5.2.0",
     "yaml": "^2.8.3",
     "postcss": "$postcss",
     "fast-uri": ">=3.1.4 <4",
     "sharp": "$sharp",
+    "brace-expansion": ">=1.1.16 <2",
     "@opentelemetry/core": "^2.8.0",
     "@opentelemetry/resources": "^2.8.0"
   },

From 4e3dcf260bbe5615efc5a628054e2f6dec48b5ce Mon Sep 17 00:00:00 2001
From: Jonathan Norris <jonathan.norris@dynatrace.com>
Date: Mon, 10 Aug 2026 14:27:30 -0400
Subject: [PATCH 2/2] chore: resolve open dependabot security alerts

- fast-uri 3.1.4 -> 3.1.5 override bump (high, alert #122)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>
---
 package-lock.json | 6 +++---
 package.json      | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index adf252c..6a61edd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6207,9 +6207,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.4",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
-      "integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
+      "version": "3.1.5",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz",
+      "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==",
       "dev": true,
       "funding": [
         {
diff --git a/package.json b/package.json
index 42e433b..34767d8 100644
--- a/package.json
+++ b/package.json
@@ -45,7 +45,7 @@
     "diff": "^5.2.0",
     "yaml": "^2.8.3",
     "postcss": "$postcss",
-    "fast-uri": ">=3.1.4 <4",
+    "fast-uri": ">=3.1.5 <4",
     "sharp": "$sharp",
     "brace-expansion": ">=1.1.16 <2",
     "@opentelemetry/core": "^2.8.0",