chore(deps): override uuid to clear the runtime Dependabot alert

[kzamanbd]

Follow-up to #100. After that merged, 7 Dependabot alerts remained. This clears the only one that ships to users.

uuid (runtime — fixed here)

@wordpress/components pulled uuid@9.0.1 and sockjs pulled 8.3.2, both below the patched 11.1.1. Added "uuid": "^11.1.1" to overrides.

• npm audit --omit=dev → 0 vulnerabilities (nothing vulnerable in dist/).
• Verified: npm run typecheck ✅ and npm run build ✅ with the ESM-only uuid 11.

The other 6 alerts (dev-only — recommend dismiss, not override)

minimatch, markdown-it, webpack-dev-server (×4) are build tooling hard-pinned by @wordpress/scripts@32.5.1 itself (webpack-dev-server ^4.15.1; markdown-it@12.3.2 exact-pinned by markdownlint@0.25.1). They never ship in the plugin. Force-overriding them fights @wordpress/scripts' tested set and risks breaking npm start / readme-lint. Best handled by dismissing the alerts as "only in dev dependencies / vulnerable code not used in production," or waiting for an upstream @wordpress/scripts bump.

Summary by CodeRabbit

• Chores
  • Updated a dependency override to a newer version, helping keep the app’s package set current and stable.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: c02995d7-8e7b-43ba-8252-766473afbfdc

📥 Commits

Reviewing files that changed from the base of the PR and between 79cc46b and 2f2bb20.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• package.json

---

📝 Walkthrough

Walkthrough

Added a new overrides entry in package.json pinning the uuid dependency to ^11.1.1, alongside the existing serialize-javascript override.

Changes

Dependency Override Update

Layer / File(s)	Summary
Add uuid override package.json	New override entry pins uuid to ^11.1.1 in the overrides block, alongside the existing serialize-javascript override.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the uuid override added to address the runtime Dependabot alert.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/deps-residual-advisories

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}