[STRATCONN-6908 : SECOPS- 24997 ] Upgrade the liquidjs version 10.25.7 to 10.27.2 to fix the liquidjs vulnerability

[Prithviraj-rathore-segment]

https://twilio-engineering.atlassian.net/browse/STRATCONN-6908

https://twilio-engineering.atlassian.net/browse/SECOPS-24997

A summary of your pull request, including the what change you're making and why.

1. This PR introduces the changes for upgradation of liquidjs version from 10.25.7 to 10.27.2 to fix the template injection vulnerability Enables RCE

2. Version greater than 10.26.0 fixes this vulnerability as per document .
   https://security.snyk.io/vuln/SNYK-JS-LIQUIDJS-16959997

3. Current latest version is 10.27.2 and it fixes all the vulnerability and fixed many bugs and performance improvements as per changelog document .
   https://liquidjs.com/tutorials/changelog.html

Local Testing

Stage Testing

https://docs.google.com/document/d/1daVbpaEnLgrrLwv_Z1aIvhAUUKWF-bzsgoOlCO0K2I4/edit?tab=t.0

MME E2E testcases -

Include any additional information about the testing you have completed to
ensure your changes behave as expected. For a speedy review, please check
any of the tasks you completed below during your testing.

• Added unit tests for new functionality
• Tested end-to-end using the local server
• [If destination is already live] Tested for backward compatibility of destination. Note: New required fields are a breaking change.
• [Segmenters] Tested in the staging environment
• [Segmenters] [If applicable for this change] Tested for regression with Hadron.

Security Review

Please ensure sensitive data is properly protected in your integration.

• Reviewed all field definitions for sensitive data (API keys, tokens, passwords, client secrets) and confirmed they use type: 'password'

New Destination Checklist

• Extracted all action API versions to verioning-info.ts file. example

[Copilot]

Pull request overview

Note

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Upgrades liquidjs across the monorepo to address a known vulnerability referenced in STRATCONN-6908 / SECOPS-24997.

Changes:

• Bumped liquidjs dependency versions from 10.25.7 to 10.27.2 in relevant package.json files.
• Updated yarn.lock to lock liquidjs to 10.27.2.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File	Description
yarn.lock	Updates the locked liquidjs package metadata to 10.27.2.
packages/destination-actions/package.json	Bumps liquidjs dependency to ^10.27.2.
packages/actions-shared/package.json	Bumps liquidjs dependency to ^10.27.2.
package.json	Updates root liquidjs dependency and pin to 10.27.2.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated no new comments.