[jonathannorris]

Summary

• Bump the handlebars override to ^4.7.10 and the npm override to 11.21.1, which bundles patched ip-address, undici, brace-expansion and postcss-selector-parser.
• Lockfile-only otherwise; prettier, eslint, as-pect and asbuild pass.
• Note: chore(deps): bump js-yaml, @typescript-eslint/eslint-plugin, @typescript-eslint/parser and eslint #17 is a Dependabot PR left untouched.

[Copilot]

🟢 Approval recommended

The dependency-only changes are internally consistent, with no blocking issues identified.

No open issues 🎉

What changed in this PR

Updates release-tooling dependencies to address Dependabot security alerts, leaving PR #17 untouched.

Changes:

• Raises overrides to handlebars ^4.7.10 and npm 11.21.1.
• Updates corresponding lockfile records and npm’s bundled dependencies.

File	Description
package.json	Updates security-related dependency overrides.
package-lock.json	Records updated versions, integrity hashes, and bundled dependencies.

_{Review effort: Balanced}