chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 3 open Dependabot security alerts by adding a yarn resolution forcing ip-address to a patched version

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#273	ip-address	high	Added resolution forcing ip-address to ^10.3.1 (resolves to 10.4.0), fixing the transitive dependency pulled in via socks
#272	ip-address	medium	Same resolution as above
#271	ip-address	medium	Same resolution as above

Skipped (unresolvable)

• Alert [DOC] update OFO tutorial with Helm and new spec changes #80 (tsup, low severity, DOM Clobbering) has no patched version published upstream yet, so it cannot be fixed at this time.

[netlify]

✅ Deploy Preview for openfeature ready!

Name	Link
🔨 Latest commit	d6b8437
🔍 Latest deploy log	https://app.netlify.com/projects/openfeature/deploys/6a71e9d74f3b0f00082ed66a
😎 Deploy Preview	https://deploy-preview-1431--openfeature.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 6fc41e73-f6da-449c-8a51-8dceff734632

📥 Commits

Reviewing files that changed from the base of the PR and between 8094d33 and d6b8437.

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

• package.json

---

📝 Walkthrough

Walkthrough

The package manifest adds an ip-address resolution at version ^10.3.1 and keeps the existing Babel resolution unchanged.

Changes

Package resolution

Layer / File(s)	Summary
Add ip-address resolution package.json	The Yarn resolutions add ip-address at ^10.3.1 and retain @babel/plugin-transform-modules-systemjs.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• open-feature/openfeature.dev#1422: Both PRs update package.json Yarn resolutions for dependency version pinning.

Suggested reviewers: aepfli

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies a dependency maintenance change that resolves Dependabot security alerts.
Description check	✅ Passed	The description directly explains the dependency resolution, affected alerts, and the unresolved tsup alert.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}