chore(deps): update / override deps (axios, brace-expansion, js-yaml)

[mpreyskurantov]

No description provided.

[Copilot]

Pull request overview

Updates dependency versions and pnpm overrides to ensure vulnerable transitive packages are forced to patched releases, and refreshes the bundled dist/ artifacts for the affected GitHub Actions.

Changes:

• Added pnpm overrides for axios, brace-expansion, and js-yaml to enforce minimum safe versions across the workspace.
• Updated pnpm-lock.yaml to reflect the upgraded dependency graph (e.g., axios → 1.19.0, brace-expansion → 1.1.18 / 2.1.4 / 5.0.9, js-yaml → 4.3.1).
• Regenerated action bundles in validate-sbom/dist/index.js and pr-filter/dist/index.js to include updated transitive code (notably undici and brace-expansion changes).

Reviewed changes

Copilot reviewed 1 out of 7 changed files in this pull request and generated no comments.

File	Description
validate-sbom/dist/index.js	Updated bundled output to incorporate patched transitive dependencies (e.g., undici/brace-expansion).
pr-filter/dist/index.js	Updated bundled output to incorporate patched transitive dependencies (e.g., undici/brace-expansion).
pnpm-workspace.yaml	Expanded overrides to force patched versions of axios/brace-expansion/js-yaml.
pnpm-lock.yaml	Lockfile refresh reflecting the new override rules and resolved versions.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.