Fix critical dependency vulnerabilities via pnpm overrides

[fabian-hiller]

Fixes the critical CVE Lite findings that currently fail the Scan dependencies job on main and every PR.

• Bump the shell-quote@1 override from 1.8.4 to 1.11.0
• Bump the seroval@1 override from 1.5.3 to 1.6.3
• Add a piscina@5 override to 5.3.2. @angular/build@22.0.7 pins piscina to exactly 5.2.0.

shell-quote@1.12.0 is still inside the 7-day minimumReleaseAge window, so the override uses 1.11.0, which already contains the fix.

Summary by CodeRabbit

• Chores
  • Updated project maintenance settings. No changes to user-facing features or behavior.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-09T11:17:56.176802Z	ad9645f	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: Repository: open-circle/formisch/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: c2d27c91-90bd-4ee0-bddb-bae66a50ab90

---

📥 Commits

Reviewing files that changed from the base of the PR and between 3a0704f and ad9645f.

---

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml, !pnpm-lock.yaml

---

📒 Files selected for processing (1)

• pnpm-workspace.yaml

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[cubic-dev-ai]

No issues found across 2 files

_{Turn on auto-fix | Re-trigger cubic}