Handle Dependabot Alerts

[Jesus Daniel Terrazas (JesuTerraz)]

Handles the following alerts:

https://github.com/microsoft/Agent365-nodejs/security/dependabot/6
https://github.com/microsoft/Agent365-nodejs/security/dependabot/1
https://github.com/microsoft/Agent365-nodejs/security/dependabot/2
https://github.com/microsoft/Agent365-nodejs/security/dependabot/3
https://github.com/microsoft/Agent365-nodejs/security/dependabot/9
https://github.com/microsoft/Agent365-nodejs/security/dependabot/12
https://github.com/microsoft/Agent365-nodejs/security/dependabot/5
https://github.com/microsoft/Agent365-nodejs/security/dependabot/4

[Copilot]

Pull Request Overview

This PR addresses Dependabot alerts by updating several dependencies to more secure versions. The primary changes involve upgrading js-yaml to address known vulnerabilities, and adjusting version specifications for Azure Identity and other packages to ensure consistency across the workspace.

• Upgraded js-yaml from versions 3.14.1 and 4.1.0 to 4.1.1 across the project
• Updated workspace overrides and package dependencies for @azure/identity, express, and langchain
• Removed outdated transitive dependencies (argparse@1.0.10, esprima@4.0.1, sprintf-js@1.0.3)

Reviewed Changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
tests/package.json	Added js-yaml@^4.1.1 to devDependencies to ensure consistent usage of the secure version
pnpm-workspace.yaml	Updated workspace overrides for @azure/identity to ^4.2.1 and added js-yaml@^4.1.1 override
pnpm-lock.yaml	Reflected dependency updates including js-yaml upgrade to 4.1.1 and removal of obsolete transitive dependencies
packages/agents-a365-tooling/package.json	Changed express dependency from wildcard to explicit version ^5.1.0
packages/agents-a365-tooling-extensions-langchain/package.json	Changed langchain dependency from wildcard to explicit version ^1.0.1
packages/agents-a365-runtime/package.json	Updated @azure/identity from wildcard to explicit version ^4.2.1 to match workspace override

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

[Copilot]

Pull Request Overview

Copilot reviewed 5 out of 6 changed files in this pull request and generated 1 comment.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

[Copilot]

Pull Request Overview

Copilot reviewed 5 out of 6 changed files in this pull request and generated no new comments.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported