chore: [DX-3759] Pin dependency versions

[paulswebapps]

For security, we want to control exactly which packages we're installing.

Summary by CodeRabbit

• Chores
  • Updated dependency versions to exact specifications for improved build consistency.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Walkthrough

The changes modify package.json to pin exact versions for dependencies. The cypress devDependency is updated from using a caret range specifier (^10.11.0) to an exact version (10.11.0), and the prettier dependency is similarly changed from ^3.2.5 to 3.2.5. These modifications remove the flexible version constraints, ensuring that only the specified exact versions are installed rather than allowing patch and minor version updates.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🧹 Nitpick comments (1)

package.json (1)

21-25: Consider a lock file strategy to manage updates and security patches.

Pinning exact versions ensures reproducible installations, which is good for consistency. However, pinned versions without an active update strategy can lead to outdated packages with unpatched security vulnerabilities. Ensure you have a process in place to regularly review and update pinned versions, or consider using lock files (package-lock.json or yarn.lock) alongside semantic versioning for a better balance between reproducibility and maintainability.

Additionally, confirm that the pinned versions for cypress and prettier are currently secure and free of known vulnerabilities.

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

Disabled knowledge base sources:

• Jira integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 3f82f22 and 9cad44f.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• package.json (1 hunks)