chore(deps): bump joi from 17.13.4 to 17.13.7 in /test-projects/rn-purchasely-test

[dependabot]

Bumps joi from 17.13.4 to 17.13.7.

Commits

• ed9d7cd 17.13.7
• f2729f7 Merge pull request #3145 from hapijs/backport/isodate-timeshift-v17
• c43fc96 chore: add regression test for #3143
• 115e7b5 fix(isoDate): pad a bare-hour timeshift with a colon, not just zeros
• 850be1e 17.13.6
• 9faeecc Merge pull request #3139 from hapijs/chore/backport-messages-proto
• 8d0b808 fix: prevent messages proto injection
• 566e73f 17.13.5
• 3f3907c Merge pull request #3135 from hapijs/chore/backport-rename-proto
• 172ecec fix: prevent proto on renames
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[greptile-apps]

PR author is in the excluded authors list.

[macminisupport]

Automated Dependabot review (2026-09-17). Note: Issues are disabled on this repo, so this report is posted directly on the PR instead of a tracking issue.

• joi 17.13.4 → 17.13.7, patch, touches only test-projects/rn-purchasely-test's lockfile/manifest.
• CI: 🟢 all 8 checks green (lint, test, build-android/ios, build-rn-0-86-android/ios, iOS Build use_frameworks!, iOS Unit Tests). No conflicts, no hold label.
• Changelog: three patch releases, all bug/security fixes — prevents prototype injection via messages and via key renames, plus an isoDate timeshift-formatting fix. No breaking changes.
• Classification: auto-merge candidate.

Companion PR: #300 (js-yaml patch bump), same status.

Per the dependabot-review workflow, nothing gets merged without an explicit human go-ahead. Reply "merge" on this PR (or on #300) to confirm, since there's no tracking issue to comment on here.

---

Generated by Claude Code

[macminisupport]

Automated Dependabot review — see the full classification table posted on #300 (GitHub Issues are disabled on this repo, so that's where the tracking summary lives instead of an issue).

This PR (joi 17.13.4 → 17.13.7, patch, test-project only): 🟢 green on all 8 checks, blocked mergeable_state (branch-protection, not a conflict), no breaking changes across the three patch releases (all security/bugfix backports). Auto-merge candidate — awaiting explicit go-ahead.

---

Generated by Claude Code