fix: resolve all 14 open Dependabot alerts

package.json

@@ -10,5 +10,8 @@
   "dependencies": {
     "itty-router": "^5.0.17",
     "typescript": "^5.8.3"
+  },
+  "overrides": {
+    "js-yaml": "^4.3.1"
   }
 }

packages/account-pages/package.json

@@ -10,6 +10,6 @@
     "devDependencies": {
         "@cloudflare/workers-types": "^4.20240117.0",
         "typescript": "^5.0.4",
-        "wrangler": "^4.109.0"
+        "wrangler": "^4.127.1"
     }
 }

packages/session-state/package.json

@@ -10,7 +10,7 @@
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20240117.0",
     "typescript": "^5.0.4",
-    "wrangler": "^4.109.0"
+    "wrangler": "^4.127.1"
   },
   "dependencies": {
     "itty-router": "^5.0.17"

packages/user-mgmt/package.json

@@ -14,10 +14,10 @@
     "session-state": "file:../session-state"
   },
   "devDependencies": {
-    "@cloudflare/vitest-pool-workers": "^0.8.0",
+    "@cloudflare/vitest-pool-workers": "^0.20.3",
     "@cloudflare/workers-types": "^4.20240117.0",
     "typescript": "^5.0.4",
     "vitest": "^4.1.10",
-    "wrangler": "^4.109.0"
+    "wrangler": "^4.127.1"
   }
 }

packages/user-mgmt/test/cloudflare-test.d.ts

@@ -0,0 +1,4 @@
+// @cloudflare/vitest-pool-workers >= 0.13 no longer exposes the "cloudflare:test"
+// ambient module via its package.json "types" field. This type reference resolves
+// through normal node_modules lookup, so it works regardless of hoist layout.
+/// <reference types="@cloudflare/vitest-pool-workers/types/cloudflare-test" />

packages/user-mgmt/vitest.config.mts

@@ -0,0 +1,31 @@
+import { cloudflareTest } from "@cloudflare/vitest-pool-workers";
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+    plugins: [
+        cloudflareTest({
+            main: "./src/index.ts",
+            miniflare: {
+                compatibilityDate: "2024-01-17",
+                d1Databases: {
+                    usersDB: "test-db",
+                },
+                bindings: {
+                    RBAC_ENABLED: "true",
+                    SUPER_ADMIN_EMAIL: "admin@test.com",
+                    EMAIL_FROM: "test@test.com",
+                    EMAIL_FROM_NAME: "Test",
+                    FORGOT_PASSWORD_URL: "https://test.com/reset",
+                    TOKEN_VALID_MINUTES: "60",
+                    EMAIL_DKIM_DOMAIN: "test.com",
+                    EMAIL_DKIM_SELECTOR: "test",
+                    EMAIL_DKIM_PRIVATE_KEY: "test-key",
+                },
+            },
+        }),
+    ],
+    test: {
+        include: ["test/**/*.test.ts"],
+        globals: true,
+    },
+});