chore: resolve open dependabot security alerts

[jonathannorris]

Summary

Resolves open Dependabot security alerts by bumping the affected dev dependencies to patched versions. No overrides/resolutions were used (this is a published repo); the fixes are a parent-package upgrade plus a lockfile-only bump.

• Bumped markdownlint-cli ^0.48.0 -> ^0.49.0, which pins js-yaml@~4.2.0 and markdown-it@~14.2.0, resolving the medium DoS advisories in both (alerts Clarify API vs SDK #26, Expected lifecycle of flags #29).
• Bumped transitive js-yaml 4.1.1 -> 4.2.0 (via markdown-link-check -> xmlbuilder2@^4.1.0) through a lockfile-only update (alert Define OTel Semantic Convention for Feature Flagging #30).

Alerts

Alert	Package	Severity	Fix
#26	markdown-it	medium	-> 14.2.0 via markdownlint-cli 0.49.0
#29	js-yaml	medium	-> 4.2.0 via markdownlint-cli 0.49.0
#30	js-yaml	medium	-> 4.2.0 via lockfile-only bump of xmlbuilder2's copy

[coderabbitai]

📝 Walkthrough

Walkthrough

The markdownlint-cli devDependency in package.json is bumped from ^0.48.0 to ^0.49.0.

Changes

Dependency Version Bump

Layer / File(s)	Summary
markdownlint-cli version update package.json	markdownlint-cli devDependency version constraint updated from ^0.48.0 to ^0.49.0.

Estimated code review effort: 1 (Trivial) | ~1 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title accurately summarizes the main change: resolving Dependabot security alerts by updating dependencies.
Description check	✅ Passed	The description is clearly related to the dependency bumps and security alert fixes in this PR.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}