Fix @tootallnate/once vulnerability

[edisile]

Done

• set @tootallnate/once resolution to 3.0.1

How to QA

• check that demo runs
• check that CI is green

Testing

• This PR has tests
• No testing required (explain why): it's just a dependency upgrade

Security

• Security considerations for review (list them):
  • Examples:
  • Access control: users can only access their own data
  • Input: user input is validated and sanitised
  • Sensitive data: secret or private data is not exposed in any way
  • ...
• This PR has no security considerations (explain why):

Issue / Card

Fixes #

Screenshots

UX Approval

• This PR does not require UX approval
• This PR does require UX approval (add context):

[webteam-app]

Demo

Jenkins

demos.haus

[Copilot]

Pull request overview

Updates the JavaScript dependency graph to remediate a reported vulnerability in @tootallnate/once by forcing the resolved version via Yarn resolutions.

Changes:

• Add a Yarn resolutions override for @tootallnate/once to 3.0.1.
• Update yarn.lock to resolve @tootallnate/once to 3.0.1.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Adds a resolutions entry to force @tootallnate/once to 3.0.1.
yarn.lock	Updates the lockfile entry so selectors resolve to @tootallnate/once@3.0.1.