Security: Update request package to fix SSRF vulnerability

[jmaddington]

Description

The request package has a medium severity SSRF (Server-Side Request Forgery) vulnerability that could allow malicious requests.

Details

• This vulnerability affects the project through transitive dependencies
• Dependabot has flagged this as alert Dependency Warning: @npmcli/move-file@1.1.2 functionality moved #6
• The vulnerability is in request <= 2.88.2, with no patched version available
• Current dependency tree contains request@2.88.2

Proposed Solution

Since request is deprecated and no longer maintained, we should consider:

1. Adding an override/resolution for request that forces the latest version
2. Identifying direct dependencies that use request and updating them to use alternatives
3. If possible, replace request with a maintained alternative like node-fetch, axios, or got

References

• GHSA-p8p7-x288-28g6
• GHSA-p8p7-x288-28g6