[Snyk] Fix for 8 vulnerabilities

[Kris-LIBIS]

Snyk has created this PR to fix 8 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Insertion of Sensitive Information Into Sent Data SNYK-JS-ANGULARCOMMON-14135651
	Cross-site Scripting (XSS) SNYK-JS-ANGULARCOMPILER-14157154
	Cross-site Scripting (XSS) SNYK-JS-ANGULARCOMPILER-14908872
	Cross-site Scripting (XSS) SNYK-JS-ANGULARCORE-14908871
	Insecure Default Initialization of Resource SNYK-JS-MODELCONTEXTPROTOCOLSDK-14171914
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MODELCONTEXTPROTOCOLSDK-14871802
	Improper Handling of Unicode Encoding SNYK-JS-TAR-15038581
	Allocation of Resources Without Limits or Throttling SNYK-JS-UNDICI-14943963

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Allocation of Resources Without Limits or Throttling

[github-actions]

Code Review Agent (Python)\n

No Python files changed. Skipping analysis.

[github-actions]

AI Governance checks failed

Please fix the following before re-running checks:

• Ensure PR body includes provenance fields:
  • Prompt
  • Model
  • Date
  • Author
  • No secrets/PII (checkbox)
• Complete compliance checklist items required for your change type (transparency notice, DPIA, logging, kill-switch, risk classification, human oversight, security review, vendor GPAI review).
• Add a rollback note if the change is risky (authz, data export, evaluation logic, etc.).

Helpful links:

• PR template (provenance): https://github.com/libis/ai-transition/blob/main/.github/pull_request_template.md
• Risk mitigation matrix: https://github.com/libis/ai-transition/blob/main/governance/risk_mitigation_matrix.md
• Reusable governance workflow: https://github.com/libis/ai-transition/blob/main/.github/workflows/ai-governance.yml

After edits, push updates or re-run the workflow to validate.