fix(security): update flatted override to >=3.4.2

[fro-bot]

Summary

Addresses GHSA-7rjr-3q8v-gx5v (HIGH severity) - Prototype Pollution via parse() in flatted.

Vulnerability: Aregular expression in the parse() function of flatted version <= 3.4.1 can be exploited for prototype pollution, potentially allowing attackers to modify the global object prototype, leading to denial of service or arbitrary code execution.

Fix: Updates the pnpm override from >=3.4.0 to >=3.4.2 to ensure the patched version is used.

Changes

• Updated pnpm.overrides.flatted from >=3.4.0 to >=3.4.2- Regenerated pnpm-lock.yaml

References

• GHSA-7rjr-3q8v-gx5v
• npm advisory

Test Plan

• pnpm check-types passes
• pnpm lint passes
• pnpm check-format passes

[fro-bot]

Autohealing Update

Root cause: This PR had diverged from main (3 commits behind).

Fix applied: Rebased branch against main to resolve conflicts and bring the security fix up to date.

Changes:- Updated pnpm.overrides.flatted from >=3.4.0 to >=3.4.2 (addresses GHSA-rf6f-7fwh-wjgh)

• Resolved merge conflict from recent dependency updates on main

Remaining risk: Low - the override correctly pins flatted to the patched version. CI checks should pass after rebase.

---