fix(security): remediate PROD-5142 dependencies (#4036)

Co-authored-by: Michael Guarino <mjg@plural.sh>

Author: plural-copilot[bot]

.github/workflows/go-ci.yaml

@@ -42,3 +42,24 @@ jobs:
           working-directory: go
           version: v2.11.4
           args: -c .golangci.yml ${{ steps.lint-packages.outputs.packages }}
+
+  tools:
+    name: Verify tools
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+        working-directory: go/tools
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-go@v6
+        with:
+          go-version-file: go/go.work
+          check-latest: true
+      - name: Verify tools module and install goimports
+        run: |
+          go mod verify
+          version=$(go list -m -f '{{.Version}}' golang.org/x/tools)
+          bin=$(mktemp -d)
+          GOBIN="$bin" go install golang.org/x/tools/cmd/goimports@"$version"
+          test -x "$bin/goimports"

assets/design-system/package.json

@@ -66,7 +66,7 @@
     "honorable-theme-default": "1.0.0-beta.5",
     "immer": "10.2.0",
     "lodash-es": "4.18.1",
-    "mermaid": "11.16.0",
+    "mermaid": "11.16.1",
     "react-animate-height": "3.2.4",
     "react-aria": "3.50.0",
     "react-diff-viewer-continued": "4.4.0",

assets/package.json

@@ -93,7 +93,7 @@
     "immer": "10.2.0",
     "is-json": "2.0.1",
     "js-cookie": "3.0.8",
-    "js-yaml": "4.3.0",
+    "js-yaml": "4.3.1",
     "kubernetes-resource-parser": "0.1.0",
     "lodash": "4.18.1",
     "parse-duration-ms": "0.1.0",
@@ -110,7 +110,8 @@
     "react-focus-lock": "2.13.7",
     "react-merge-refs": "2.1.1",
     "react-query-swagger": "15.13.2",
-    "react-router-dom": "6.30.4",
+    "react-router": "7.18.0",
+    "react-router-dom": "7.18.0",
     "react-virtualized-auto-sizer": "1.0.26",
     "rehype-raw": "7.0.0",
     "rehype-sanitize": "6.0.0",
@@ -181,7 +182,7 @@
     "elkjs": "0.12.0",
     "brace-expansion@npm:^2.0.1": "2.1.2",
     "brace-expansion@npm:^2.0.2": "2.1.2",
-    "js-yaml": "4.3.0",
+    "js-yaml": "4.3.1",
     "postcss": "8.5.19",
     "shell-quote": "1.10.0",
     "fast-uri": "3.1.4"