Reduce npm audit findings

[edithatogo]

Summary

• Refreshes vulnerable transitive dependency versions through npm audit fix without forcing semver-major updates.
• Removes the high-severity linkify-it audit finding and several moderate transitive findings.
• Leaves the remaining markdownlint-cli-related moderate findings for a separate major-version review.

Validation

Ran after the lockfile update:

npm run sync
npm run validate
npm test
npm audit --json

Results:

• npm run sync: passed
• npm run validate: passed
• npm test: passed
• audit reduced from 7 findings (6 moderate, 1 high) to 3 moderate findings

Remaining findings are all via markdownlint-cli and require markdownlint-cli@0.49.0, which npm marks as a semver-major update.

[Copilot]

Copilot wasn't able to review any files in this pull request.

[amazon-q-developer]

The dependency updates in this PR correctly address npm audit findings through legitimate package version bumps. All changes are properly formatted lockfile updates that fix security vulnerabilities without introducing defects. The PR is ready to merge.

---

You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.

[gemini-code-assist]

Code Review

This pull request updates package-lock.json to rename the package from 'humanizer-next' to 'authentext-next' and upgrades several dependencies, including brace-expansion, linkify-it, smol-toml, and yaml. I have no feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[edithatogo]

Superseded by merged PR #230 (4417398), which consolidates the dependency updates on Node 24 and produces a clean
pm audit (0 vulnerabilities) with the full hosted matrix green on the pull-request revision. Closing this overlapping branch to avoid reintroducing an older lockfile.