Update dependency snyk-nodejs-lockfile-parser to v2.9.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
snyk-nodejs-lockfile-parser	2.5.0 → 2.9.1

---

Release Notes

snyk/nodejs-lockfile-parser (snyk-nodejs-lockfile-parser)

v2.9.1

Compare Source

Bug Fixes

• [CMPA-552] set bugs url and remove bin dir from files (b20023d)

v2.9.0

Compare Source

Bug Fixes

• harden component-metadata distribution:url labels [CMPA-603] (cd13deb)

Features

• emit component-metadata labels for npm lockfile v1 (legacy depTree) (cad891c)
• report npm package hashes and distribution URLs as node labels (2571064)

v2.8.1

Compare Source

Bug Fixes

• yarn-berry: key workspace prune by resolved name for npm aliases (8d05f54)
• yarn-berry: prune workspace devDependencies from prod graph (08a9545)

v2.8.0

Compare Source

Bug Fixes

• node 20 tests (fa8e2d3)
• release context (cedbc96)
• surface underlying npm lockfile JSON parse errors [OSM-3753] (663f2e5)
• switch to OIDC auth publishing (a07b91c)

Features

• update to node 24 (3d93bd7)

v2.7.1

Compare Source

Bug Fixes

• use actual package name from lockfile for aliased packages (9d8607d)

v2.7.0

Compare Source

Bug Fixes

• [OSM-3591] handle patches applied as resolutions (cd4a5bc)
• [OSM-3624] Support pnpm v6 lockfile for workspaces (b61e8dd)
• bump tar to resolve vulns (6b4a56a)

Features

• [OSM-3591] added support for versioned scoped resolutions (2c7574e)

v2.6.1

Compare Source

Bug Fixes

• patch protocol URL decoding and npm alias package creation (3b99e1e)

v2.6.0

Compare Source

Features

• override vulnerable 'tar' transitive dependency (#​299) (1bf5d3d)

v2.5.1

Compare Source

Bug Fixes

• [OSM-3532] yarn scoped alias fix (025898c)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.