fix: resolve all HIGH/CRITICAL vulnerabilities across all lockfiles

Main yarn.lock:
- fast-xml-parser ~5.5.12 → ~5.7.2 (resolves to 5.7.3)
- fast-xml-builder 1.1.4 → 1.2.0
- axios 1.15.0 → 1.16.1
- @xmldom/xmldom 0.9.9 → 0.9.10
- basic-ftp 5.2.2 → 6.0.1
- picomatch 2.3.1/4.0.3 → 2.3.2/4.0.4
- flatted 3.3.3 → 3.4.2
- fast-uri 3.0.6 → 3.1.2
- tmp 0.2.5 → 0.2.7
- @aws-amplify/ai-constructs 1.6.1 → 1.6.2

scripts/yarn.lock:
- axios 1.12.0 → 1.16.1
- minimatch 9.0.5 → 10.2.5
- fast-xml-parser 4.4.1 → 5.8.0

jsonServer/yarn.lock:
- minimatch 3.1.2 → 3.1.5

jsonServer/src-server/yarn.lock:
- lodash 4.17.21 → 4.18.1

Author: Simone319

package.json

@@ -456,7 +456,7 @@
     "zod": "3.25.17"
   },
   "resolutions": {
-    "@aws-amplify/plugin-types": "1.12.0",
+    "@aws-amplify/plugin-types": "1.12.1",
     "**/glob-parent": "^6.0.2",
     "**/istanbul/async": "^2.6.4",
     "**/jake/async": "^2.6.4",
@@ -473,9 +473,9 @@
     "ejs": "^3.1.7",
     "json5": "^2.2.3",
     "semver": "^7.5.2",
-    "axios": "^1.15.0",
+    "axios": "^1.16.1",
     "braces": "^3.0.3",
-    "@aws-sdk/core/@aws-sdk/xml-builder": "^3.972.15",
+    "@aws-sdk/core/@aws-sdk/xml-builder": "^3.972.22",
     "cookie": "^0.7.0",
     "@octokit/request-error": "^5.1.1",
     "@octokit/request": "^8.4.1",
@@ -486,15 +486,18 @@
     "qs": "^6.15.0",
     "js-yaml": "^4.1.1",
     "diff": "^8.0.3",
-    "tmp": "^0.2.5",
-    "basic-ftp": "^5.2.2",
+    "tmp": "^0.2.6",
+    "basic-ftp": ">=5.3.1",
     "lodash-es": "^4.18.1",
     "minimatch": "^3.1.5",
     "handlebars": "^4.7.9",
-    "@xmldom/xmldom": "^0.9.9",
+    "@xmldom/xmldom": ">=0.9.10",
     "path-to-regexp": "^0.1.13",
     "brace-expansion": "^1.1.13",
-    "**/fast-xml-parser": "~5.5.12"
+    "fast-uri": ">=3.1.2",
+    "flatted": ">=3.4.2",
+    "**/fast-xml-parser": "~5.7.2",
+    "**/fast-xml-builder": ">=1.1.7"
   },
   "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e"
 }

packages/amplify-data-construct/.jsii

@@ -6,7 +6,7 @@
     ]
   },
   "bundled": {
-    "@aws-amplify/ai-constructs": "^1.6.1",
+    "@aws-amplify/ai-constructs": "^1.6.2",
     "@aws-amplify/backend-output-schemas": "^1.0.0",
     "@aws-amplify/backend-output-storage": "^1.0.0",
     "@aws-amplify/graphql-auth-transformer": "4.2.7",
@@ -8599,5 +8599,5 @@
   },
   "types": {},
   "version": "1.17.2",
-  "fingerprint": "o956pibqc8+NLxUuoj4k0pEAu9G9uS812Zr0hq2DZa4="
+  "fingerprint": "+mb8cosaX72qWpCSlv0eP4nEEz9MOemK60i+juzbkbw="
 }

packages/amplify-data-construct/package.json

@@ -178,7 +178,7 @@
     "zod"
   ],
   "dependencies": {
-    "@aws-amplify/ai-constructs": "^1.6.1",
+    "@aws-amplify/ai-constructs": "^1.6.2",
     "@aws-amplify/backend-output-schemas": "^1.0.0",
     "@aws-amplify/backend-output-storage": "^1.0.0",
     "@aws-amplify/graphql-api-construct": "1.21.2",

packages/amplify-graphql-api-construct/.jsii

@@ -6,7 +6,7 @@
     ]
   },
   "bundled": {
-    "@aws-amplify/ai-constructs": "^1.6.1",
+    "@aws-amplify/ai-constructs": "^1.6.2",
     "@aws-amplify/backend-output-schemas": "^1.0.0",
     "@aws-amplify/backend-output-storage": "^1.0.0",
     "@aws-amplify/graphql-auth-transformer": "4.2.7",
@@ -14040,5 +14040,5 @@
     }
   },
   "version": "1.21.2",
-  "fingerprint": "uhL72uTHa424IaBCwBnTI5FPExcLXDhBkBHpXqL1m4A="
+  "fingerprint": "nEzFDjfrZqk9tKVKgZLkcrTsKJGXr+N7HMLiwvaSvFM="
 }

packages/amplify-graphql-api-construct/package.json

@@ -179,7 +179,7 @@
     "zod"
   ],
   "dependencies": {
-    "@aws-amplify/ai-constructs": "^1.6.1",
+    "@aws-amplify/ai-constructs": "^1.6.2",
     "@aws-amplify/backend-output-schemas": "^1.0.0",
     "@aws-amplify/backend-output-storage": "^1.0.0",
     "@aws-amplify/graphql-auth-transformer": "4.2.7",

packages/amplify-graphql-conversation-transformer/package.json

@@ -24,7 +24,7 @@
     "extract-api": "ts-node ../../scripts/extract-api.ts"
   },
   "dependencies": {
-    "@aws-amplify/ai-constructs": "^1.6.1",
+    "@aws-amplify/ai-constructs": "^1.6.2",
     "@aws-amplify/graphql-directives": "2.8.0",
     "@aws-amplify/graphql-index-transformer": "3.1.1",
     "@aws-amplify/graphql-model-transformer": "3.4.1",

packages/graphql-transformers-e2e-tests/resources/jsonServer/package.json

@@ -10,5 +10,8 @@
   "dependencies": {
     "aws-cdk-lib": "~2.224.0",
     "constructs": "^10.3.0"
+  },
+  "resolutions": {
+    "minimatch": "3.1.5"
   }
 }

packages/graphql-transformers-e2e-tests/resources/jsonServer/src-server/package.json

@@ -8,6 +8,7 @@
   },
   "resolutions": {
     "got": "^11.8.5",
-    "path-to-regexp": "^1.9.0"
+    "path-to-regexp": "^1.9.0",
+    "lodash": ">=4.17.23"
   }
 }