Chore: Upgrade dependencies to resolve Dependabot alerts

[esnible]

Summary

Dependabot flagged several high severity vulnerabilities; see https://github.com/rossoctl/.github/security/dependabot

Added an overrides block

• serialize-javascript → ^7.0.5 (was pinned to 6.0.2 by copy-webpack-plugin / css-minimizer-webpack-plugin) — resolves the high + moderate serialize-javascript alerts (Landing page #1, Update README.md #3)
• sockjs > uuid → ^11.1.1 (sockjs still requests the vulnerable uuid@^8.3.2 and has no fixed release) — resolves the moderate uuid alert (Change PoCs to demos #2), which also clears the webpack-dev-server/sockjs chain (Edit website metadata #5, Add links #6)
• Pinned @docusaurus/theme-mermaid from ^3.10.1 → 3.10.1 — matching the exact-pin style of the other @docusaurus/* packages. npm audit fix had bumped it to 3.10.2, which mismatched @docusaurus/core@3.10.1 and broke the build (Docusaurus requires all official packages at the same version).

package-lock.json: regenerated by npm audit fix + npm install, which upgraded the remaining transitive deps to their patched versions.

• fast-uri → 3.1.4 (high)
• svgo → 3.3.4 (high)
• brace-expansion → 1.1.16 (high)
• dompurify → 3.4.12 (low)
• body-parser → 1.20.6 (low)

[netlify]

✅ Deploy Preview for animated-crumble-fb8862 ready!

Name	Link
🔨 Latest commit	ba7c964
🔍 Latest deploy log	https://app.netlify.com/projects/animated-crumble-fb8862/deploys/6a62142456f01900081c2e21
😎 Deploy Preview	https://deploy-preview-94--animated-crumble-fb8862.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[cwiklik]

Straightforward, well-scoped Dependabot remediation. Adds an overrides block (serialize-javascript ^7.0.5, sockjs>uuid ^11.1.1) and exact-pins @docusaurus/theme-mermaid to match its siblings, resolving the flagged high/moderate npm alerts.

Verified the lockfile churn:

• Every resolved URL points to registry.npmjs.org (no typosquat/alt-registry), all with sha512 integrity hashes.
• serialize-javascript resolves to 7.0.7 and uuid to 11.1.1 — real versions that fix the cited CVEs; the transitive bumps (dompurify 3.4.12, webpack-dev-server 5.2.6, svgo 3.3.4, body-parser 1.20.6, …) are consistent with the override cascade and clear the webpack-dev-server/sockjs chain.
• Netlify deploy-preview built successfully, so the new lockfile installs and the site builds.

No functional/content changes, no secrets, no .claude/.vscode. DCO green. LGTM.

Assisted-By: Claude Code