Update all dependencies to fix vulnerabilities

[risantos]

Description

• Update all dependencies to fix vulnerabilities.

Related issues

• https://github.com/uphold/validator.js-asserts/security/dependabot/45
• https://github.com/uphold/validator.js-asserts/security/dependabot/47
• https://github.com/uphold/validator.js-asserts/security/dependabot/48
• https://github.com/uphold/validator.js-asserts/security/dependabot/50

[Copilot]

Pull request overview

This PR updates all dependencies to address security vulnerabilities identified in 4 Dependabot alerts. The changes include updating the main runtime dependency (lodash) and multiple development dependencies including ESLint, Prettier, and various validator libraries used in tests.

Changes:

• Updates lodash from 4.17.21 to 4.17.23 to fix security vulnerabilities
• Updates development tooling (eslint, prettier, release-it, eslint-config-uphold) to latest versions
• Updates validation library dependencies (bignumber.js, google-libphonenumber, validator) to patch versions
• Updates transitive dependencies in yarn.lock including Babel, ESLint ecosystem packages, and other tools

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates direct dependencies: lodash (patch), bignumber.js (patch), eslint (9.28.0→9.39.2), eslint-config-uphold (minor), google-libphonenumber (patch), prettier (minor), release-it (patch), validator (patch), @fastify/pre-commit (patch)
yarn.lock	Updates transitive dependencies including Babel 7.27→7.28, ESLint ecosystem packages, and various other tools. Notable updates include @babel/core, @babel/eslint-parser, eslint-plugin-jsdoc, and many @jridgewell packages

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[marioviana]

@dependabot rebase

[marioviana]

LGTM.

Feedback from Claude:

• Bulk dependency update fixing multiple security vulnerabilities.
• Changes: lodash patch bump (prod dep), plus dev dependency updates (eslint, prettier, bignumber.js, google-libphonenumber, release-it, validator, eslint-config-uphold, @fastify/pre-commit).
• All minor/patch bumps. No major version changes. Safe to merge.

[marioviana]

@risantos can you re-check this pull-request again once you have the time and @josecarlosbrandao comments?

Given that, @josecarlosbrandao usually on a bulk like this, I wouldn't mind if we are not upgrading exactly to the latest one on each one, new versions keep appearing and usually it takes some time for us to proceed with side-projects such as this one.

All addressed.