chore(deps): flatted overrides for vulnerability

[kanoru3101]

What/Why/How?

Update flatted vulnerabilities https://github.com/Redocly/website/security/dependabot/70
Run npm audit fix

Reference

Testing

Screenshots (optional)

Check yourself

• Code is linted
• Tested
• All new/updated code is covered with tests

Security

• Security impact of change has been considered
• Code follows company security practices and guidelines

[redocly]

marketing-site AI Review: 🟢 Completed

Reunite Bot has reviewed your changes and found 1 potential issue(s).

Note

Medium Risk

Running npm audit fix blanket-upgraded multiple nested dependencies, including core build tools (vite, esbuild). While this resolves security vulnerabilities, updating build tools and 0.x dependencies (such as esbuild 0.25.x to 0.27.x) carries a potential risk of introducing subtle dev-server or build regressions. A quick check of the build output and dev environment is recommended.

Overview

Resolves a Dependabot security alert for the flatted package by bumping it from 3.3.3 to 3.4.2 via npm audit fix.

As a side effect of the audit fix, several other transitive dependencies were updated in package-lock.json, most notably:

• vite (hoisted and bumped from 7.1.12 to 7.3.2)
• esbuild and @esbuild/* (0.25.10 -> 0.27.7)
• lodash (4.17.23 -> 4.18.1)
• follow-redirects (1.15.11 -> 1.16.0)
• @xmldom/xmldom (0.8.10 -> 0.8.13)
• postcss (8.5.6 -> 8.5.12)

No application code or package.json configurations were modified.

[redocly]

The flatted package was correctly updated to 3.4.2 via npm audit fix, resolving vulnerabilities without needing overrides. However, significant transitive updates like esbuild (0.25 to 0.27) and vite pose risks and should be tested carefully.