fix(deps):Upgrade vulnerable dependency to address CVE detected by Trivy

[piyushsinghgaur1]

This pull request updates the node-forge dependency in the package.json file to a newer version. This is a minor maintenance change to ensure the project uses the latest compatible version of node-forge.

[sonarqubecloud]

SonarQube reviewer guide

Summary: Updates dependency versions in package-lock.json and package.json, including npm to 11.12.1, ibm-cloud-sdk-core to 5.4.9, and various utility libraries with security and compatibility improvements.

Review Focus: Pay close attention to the ibm-cloud-sdk-core upgrade from 5.4.5 to 5.4.9, which introduces a significant dependency change—file-type upgraded from 16.5.4 to 21.3.2 (major version bump). This brings new peer dependencies (@tokenizer/inflate, strtok3, token-types, uint8array-extras) and a new direct dependency (load-esm). Verify these new dependencies don't conflict with existing code and test file-type functionality. Also note npm bundled dependency removals (cli-columns, promise-retry, validate-npm-package-license) and the node-forge security patch.

Start review at: package.json. This is where the direct dependency changes are specified. Focus on the ibm-cloud-sdk-core version bump and node-forge override update, as these are the intentional changes that drive the lock file updates. Understanding the root causes here will help contextualize the cascading dependency changes in package-lock.json.

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[yeshamavani]

🎉 This PR is included in version 2.0.1 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀