Remediate code scanning alert by upgrading locked jsonpath dependency

[Copilot]

This PR addresses the repository’s code scanning alert by removing a vulnerable locked version of jsonpath from the frontend dependency graph. The lockfile now resolves jsonpath to a non-vulnerable release.

• Alert remediation

  • Updated frontend/package-lock.json to move node_modules/jsonpath from 1.1.1 to 1.3.0 (fixed line for the reported CVE).

• Lockfile dependency graph update

  • Updated jsonpath’s lockfile-resolved transitive dependencies to the versions required by 1.3.0 (notably esprima, static-eval, and underscore under the same lock scope).

• Scope

  • Change is isolated to frontend/package-lock.json; no application source files were modified.

"node_modules/jsonpath": {
  "version": "1.3.0",
  "resolved": "https://registry.npmjs.org/jsonpath/-/jsonpath-1.3.0.tgz"
}

[Copilot]

🟢 Approval recommended

The change is isolated to the frontend lockfile and consistently upgrades jsonpath and its scoped transitive entries without introducing inconsistencies in the reviewed sections.

Pull request overview

This PR remediates a code scanning alert in the frontend dependency graph by updating the lockfile so jsonpath resolves to a non-vulnerable release.

Changes:

• Upgraded the locked node_modules/jsonpath package from 1.1.1 to 1.3.0.
• Updated jsonpath’s associated lockfile-resolved transitive dependencies within its scope (esprima, static-eval, underscore) to versions required by jsonpath@1.3.0.

File summaries

File	Description
frontend/package-lock.json	Updates the lockfile resolution for jsonpath (and its scoped transitive deps) to remediate the reported vulnerability.

Review details

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)

• frontend/package-lock.json: Generated file

• Files reviewed: 0/1 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.