chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved open Dependabot security alerts by updating the direct postcss dependency and adding resolutions to pin transitive dependencies to patched versions.

Note: alert #80 (tsup DOM clobbering, low) has no patched version available and is skipped. Alerts #108 and #104 (mermaid) are already fixed by the direct mermaid@11.10.0 dependency. Alerts #204 and #205 (fast-xml-builder) are already fixed by the fast-xml-parser: ^5.7.0 resolution pulling in fast-xml-builder@1.2.0.

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#208	@babel/plugin-transform-modules-systemjs	high	Pinned to >=7.29.4 via resolutions
#207	fast-uri	high	Pinned to >=3.1.2 via resolutions
#206	fast-uri	high	Pinned to >=3.1.2 via resolutions
#205	fast-xml-builder	high	Already fixed via fast-xml-parser: ^5.7.0 resolution
#204	fast-xml-builder	medium	Already fixed via fast-xml-parser: ^5.7.0 resolution
#203	ip-address	medium	Pinned to >=10.1.1 via resolutions
#202	postcss	medium	Bumped direct dep to ^8.5.10; forced via resolutions
#131	webpack	low	Pinned to 5.99.9 via resolutions
#130	webpack	low	Pinned to 5.99.9 via resolutions
#113	js-yaml	medium	Scoped to markdownlint-cli2/js-yaml: >=4.1.1 via resolutions

[netlify]

✅ Deploy Preview for openfeature ready!

Name	Link
🔨 Latest commit	3ffde44
🔍 Latest deploy log	https://app.netlify.com/projects/openfeature/deploys/6a037ce4d647540008989581
😎 Deploy Preview	https://deploy-preview-1381--openfeature.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[gemini-code-assist]

Code Review

This pull request updates several dependencies, including postcss, and adds new entries to package.json to address transitive dependency issues. Feedback indicates that these security fixes were incorrectly added to a dependency block instead of a resolutions field; specifically, using a resolution selector like styled-components/postcss as a package name will cause installation failures, and some additions are redundant.