Security: Fix fsevents CVE-2023-45311

[vyvergil]

Summary

• Resolves critical security vulnerability CVE-2023-45311 in fsevents
• Updates vulnerable version (1.1.1) to secure version (1.2.11)
• Uses npm overrides to force transitive dependency update

Security Details

• CVE: CVE-2023-45311
• Severity: Critical (CVSS 9.8)
• Issue: Code injection via compromised S3 dependency
• Impact: Potential arbitrary code execution

Changes

• Added npm overrides to force fsevents >= 1.2.11
• Updated package-lock.json with secure version and integrity hash

Risk Assessment

• Breaking Changes: ⚠️ Low risk - patch release focusing on security
• Build Impact: Minimal - fsevents is primarily macOS dev dependency
• Testing: Repository has test suite available for verification

Testing Checklist

• Existing test suite passes after npm install
• Application builds successfully
• No functional regressions detected

References

• Semgrep Security Finding: fsevents CVE-2023-45311
• Fixed versions: >= 1.2.11

🤖 Generated with Claude Code