fix: bump deps and add overrides to resolve Snyk vulnerabilities

[cs-raj]

Summary

• Bumped 18 direct dependencies (Angular 21.2.17→21.2.19, postcss, Contentstack SDKs, Tailwind, tooling)
• Added 8 overrides in package.json to pin vulnerable transitive deps
• Bumped package version 0.1.2 → 0.1.3
• Build verified passing (ng build — 9.5s, no errors)

Direct dep changes

Package	Before	After
@angular/common	21.2.17	21.2.19
@angular/compiler	21.2.17	21.2.19
@angular/core	21.2.17	21.2.19
@angular/compiler-cli	21.2.17	21.2.19
@angular/platform-browser	21.2.17	21.2.19
@angular/router	21.2.17	21.2.19
@angular-devkit/build-angular	21.2.15	21.2.20
@angular/cli	21.2.15	21.2.20
postcss	8.5.24	8.5.26
@contentstack/delivery-sdk	^5.2.1	^5.5.2
@contentstack/live-preview-utils	^4.4.4	^4.4.5
tailwindcss	^4.3.1	^4.3.3
@tailwindcss/postcss	^4.3.1	^4.3.3
@types/react	^19.2.17	^19.2.18
@rollup/rollup-linux-x64-gnu	^4.62.0	^4.62.4
@rollup/rollup-linux-x64-musl	^4.62.0	^4.62.4
lightningcss-linux-x64-gnu	1.32.0	1.33.0
lightningcss-linux-x64-musl	1.32.0	1.33.0

Overrides added (transitive deps)

Package	Pinned to	Severity fixed
@babel/core	7.29.6	Low
@hono/node-server	2.0.6	Moderate
esbuild	0.28.1	Low
http-proxy-middleware	3.0.7	High
piscina	5.2.0	High
undici	7.29.0	High
uuid	14.0.1	Moderate
webpack-dev-server	5.2.6	Moderate

Vulnerability count

Severity	Before	After
Critical	0	0
High	9	4
Moderate	4	7
Low	2	0
Total	15	11

Remaining issues (require --force or manual intervention)

• image-size (High) — vulnerable range is * (all versions); no safe fix exists without @angular-devkit/build-angular major upgrade
• @angular/build (Moderate) — fix requires Angular 22.x major upgrade
• webpack-dev-server (Moderate) — a new CVE now covers ≤5.2.6; next safe version is 6.0.0 (major bump, skipped)
• @hono/node-server (Moderate) — a new CVE covers ≤2.0.9; next safe version needs investigation
• undici (High) — overridden to 7.29.0; advisory may lag

Build status

✅ npm run build passed — 9.5s, no errors. CommonJS bailout warnings from @contentstack/utils, lodash, humps etc. are pre-existing in the Contentstack SDK and unrelated to these changes.

🤖 Generated with Claude Code

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[github-actions]

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	0	0	25	✅ Passed
🟡 Medium Severity	0	0	0	✅ Passed
🔵 Low Severity	0	0	0	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	Breaches (with fixes)	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	0	15 / 30 days	✅ Passed
🟠 High	0	0	30 / 120 days	✅ Passed
🟡 Medium	0	0	90 / 365 days	✅ Passed
🔵 Low	0	0	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

[github-actions]

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	0	0	25	✅ Passed
🟡 Medium Severity	0	2	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	Breaches (with fixes)	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	0	15 / 30 days	✅ Passed
🟠 High	0	0	30 / 120 days	✅ Passed
🟡 Medium	0	0	90 / 365 days	✅ Passed
🔵 Low	0	0	180 / 365 days	✅ Passed

ℹ️ Vulnerabilities Without Available Fixes (Informational Only)

The following vulnerabilities were detected but do not have fixes available (no upgrade or patch). These are excluded from failure thresholds:

• Critical without fixes: 0
• High without fixes: 0
• Medium without fixes: 2
• Low without fixes: 0

✅ BUILD PASSED - All security checks passed