override form-data (from jsdom dependency) to address CVE-2025-7783 (#20)

* override form-data (from jsdom dependency) to address CVE-2025-7783

* add validate plugin step to avoid future failures on release

Author: alexluck-sift

.github/workflows/ci.yml

@@ -114,6 +114,13 @@ jobs:
             -v $PWD/${{ steps.metadata.outputs.archive }}:/archive.zip \
             grafana/plugin-validator-cli -analyzer=metadatavalid /archive.zip
 
+      - name: Validate plugin
+        run: |
+          npx -y @grafana/plugin-validator@latest -sourceCodeUri file://./ $PLUGIN_ARCHIVE
+        shell: bash
+        env:
+          PLUGIN_ARCHIVE: ${{ steps.metadata.outputs.archive }}
+
       - name: Archive Build
         uses: actions/upload-artifact@v4
         with:

package-lock.json

@@ -95,5 +95,8 @@
     "rxjs": "7.8.1",
     "tslib": "2.5.3"
   },
+  "overrides": {
+    "form-data": "^4.0.4"
+  },
   "packageManager": "npm@9.8.0"
 }