[amanabiy]

Updates transitive dependencies to resolve 3 security alerts that had no auto-generated Dependabot PR. Lockfile-only changes.

Note: There is also an open Dependabot PR #178 (Bump undici) for the undici alert, but its branch has been modified by automation and was left open to be handled separately.

Alerts addressed by this PR

• GHSA-w293-vg96-wgc3 | undici 7.x | high | 7.29.0 → 7.30.0 | https://github.com/cloudscape-design/chat-components/security/dependabot/194
• GHSA-6w3j-5fw6-r9vr | joi 18.x | low | 18.2.3 → 18.2.9 | https://github.com/cloudscape-design/chat-components/security/dependabot/186
• GHSA-gg4h-3hg2-grpc | joi 18.x | low | 18.2.3 → 18.2.9 | https://github.com/cloudscape-design/chat-components/security/dependabot/185

How each change was made

All updates are transitive (lockfile splice — not direct dependencies). Patched releases applied via npm audit fix.

Dependabot PRs left open and handled separately

• chore: Bump undici from 7.29.0 to 7.30.0 #178 (Bump undici from 7.29.0 to 7.30.0) — left open for human review

Merging this PR clears all 3 gap alerts it covers.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.16%. Comparing base (bfd1b19) to head (c98fcdc).

❌ Your project check has failed because the head coverage (88.16%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #179   +/-   ##
=======================================
  Coverage   88.16%   88.16%           
=======================================
  Files          25       25           
  Lines         355      355           
  Branches      101       98    -3     
=======================================
  Hits          313      313           
  Misses         42       42           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.