fix: update js-cookie (CVE-2026-46625)

Refs: PT-2041

Author: tjgofore

package.json

@@ -60,6 +60,10 @@
         "Pinning to >=0.2.4 via @graphql-codegen/cli > inquirer > external-editor > tmp",
         "See https://www.npmjs.com/advisories/1109537",
         "NOTE: This can be removed when @graphql-codegen/cli no longer resolves vulnerable tmp versions"
+      ],
+      "js-cookie": [
+        "To fix security advisory requiring js-cookie >=3.0.7",
+        "NOTE: This can be removed when transitive dependencies no longer resolve js-cookie 2.x"
       ]
     }
   },
@@ -70,7 +74,8 @@
     "lodash": "^4.18.1",
     "**/@typescript-eslint/typescript-estree/minimatch": "^9.0.7",
     "**/@ardatan/relay-compiler/immutable": "^3.8.3",
-    "tmp": ">=0.2.4"
+    "tmp": ">=0.2.4",
+    "js-cookie": "^3.0.7"
   },
   "dependencies": {
     "@apollo/client": "^3.13.5",

yarn.lock

@@ -8019,10 +8019,10 @@ jose@^5.0.0:
   resolved "https://registry.yarnpkg.com/jose/-/jose-5.10.0.tgz#c37346a099d6467c401351a9a0c2161e0f52c4be"
   integrity sha512-s+3Al/p9g32Iq+oqXxkW//7jk2Vig6FF1CFqzVXoTUXt2qz89YWbL+OwS17NFYEvxC35n0FKeGO2LGYSxeM2Gg==
 
-js-cookie@^2.2.1:
-  version "2.2.1"
-  resolved "https://registry.yarnpkg.com/js-cookie/-/js-cookie-2.2.1.tgz#69e106dc5d5806894562902aa5baec3744e9b2b8"
-  integrity sha512-HvdH2LzI/EAZcUwA8+0nKNtWHqS+ZmijLA30RwZA0bo7ToCckjK5MkGhjED9KoRcXO6BaGI3I9UIzSA1FKFPOQ==
+js-cookie@^2.2.1, js-cookie@^3.0.7:
+  version "3.0.7"
+  resolved "https://registry.yarnpkg.com/js-cookie/-/js-cookie-3.0.7.tgz#0a53abfc459c8e89c85d7a38eb6cb68714965b8c"
+  integrity sha512-z/wZZgDrkNV1eA0ULjM/F9/50Ya8fbzgKneSpoPsXSGd0KnpdtHfOZWK+GcwLk+EZbS4F9RBhU+K2RgzuDaItw==
 
 "js-tokens@^3.0.0 || ^4.0.0", js-tokens@^4.0.0:
   version "4.0.0"