chore: Remediate 3 Dependabot security alerts (react-router-dom 6→7)

[ernst-dev]

Summary

Upgrades react-router-dom from ^6.30.4 to ^7.18.2 (dev dependency) to resolve all 3 open Dependabot security alerts.

NPMPM availability

Not applicable — all upgraded packages are dev-only dependencies (dev: true in lockfile). No non-dev dependency versions increased.

Alerts resolved

Package	Major line	Vulnerable range	Resolved version	Severity	Advisory
react-router	6.x	>= 6.0.0, < 7.18.0	7.18.2	medium	GHSA-wrjc-x8rr-h8h6 / CVE-2026-53669
react-router	6.x	>= 6.4.0, < 7.18.0	7.18.2	medium	GHSA-337j-9hxr-rhxg / CVE-2026-53666
react-router-dom	6.x	>= 6.30.2, <= 6.30.4	7.18.2	medium	GHSA-jjmj-jmhj-qwj2 / CVE-2026-53668

Remediation details

• Rung used: 2 (npm audit fix --force) — no patch available within 6.x; all 3 alerts require the 6→7 major version upgrade.
• Override added: No
• Classification:
  • ALERT-DRIVEN: react-router 6.30.4 → 7.18.2, react-router-dom 6.30.4 → 7.18.2
  • COLLATERAL: js-yaml 4.3.0 → 4.3.1 (also a security fix — GHSA-5p4m-2wfm-xmqj), cookie@1.1.1 added (new react-router dep), set-cookie-parser@2.7.2 added (new react-router dep), @remix-run/router@1.23.3 removed (no longer used in v7), yaml@2.9.0 removed

Unresolved alerts

None — merging this PR is expected to CLEAR ALL 3 open Dependabot alerts for this repo.

Notes

• react-router-dom is a devDependency only, used for dev pages / testing. The 6→7 migration is a breaking change for application code but low-risk for this repo's dev tooling.
• The HW2 first-party strip was applied (no @cloudscape-design/* entries in lockfile).
• Net diff: 46 insertions, 47 deletions across package.json + package-lock.json.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.66%. Comparing base (8e0d466) to head (6be843a).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #459      +/-   ##
==========================================
- Coverage   94.16%   93.66%   -0.50%     
==========================================
  Files          59       59              
  Lines        1816     1816              
  Branches      461      489      +28     
==========================================
- Hits         1710     1701       -9     
- Misses        106      115       +9     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.