[Snyk] Security upgrade @faker-js/faker from 8.4.1 to 10.5.0

[snyk-io-us]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• app/package.json
• app/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Eval Injection SNYK-JS-FAKERJSFAKER-18674671	711

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Eval Injection

[snyk-io-us]

This upgrade spans two major versions (v9 and v10) and introduces significant breaking changes requiring code and environment updates.

Key Breaking Changes in v9.0:

• Node.js 18+ Required: Support for Node.js v14 and v16 was dropped.
• TypeScript v5 Required: Support for TypeScript v4 was discontinued.
• Removal of Deprecated Code: Many methods deprecated in v8 were removed across modules like commerce, company, date, helpers, and location.
• RNG Changes: The default random number generator was updated, which can cause subtle differences in generated values even with the same seed.

Key Breaking Changes in v10.0:

• Node.js 20+ Required: Support for Node.js v18 was dropped.
• ESM Only Package: The package is now ESM-only. While CommonJS require() may still work in modern Node.js versions (v20.19+), it can cause issues with bundlers and test runners like Jest.
• Removal of v9 Deprecations: Methods deprecated in v9 have been removed.
• Behavioral Change: The default strategy for the word module will now throw an error if no matching word is found, whereas it previously returned a random word.

Recommendation:

1. Ensure your environment meets the Node.js v20.19+ requirement.
2. Upgrade to TypeScript v5 or higher.
3. Review your project for any code using methods that were deprecated in v8 and v9, as they have been removed. The official migration guides are the best source for finding replacements.
4. If using CommonJS, verify your build and test processes, especially with Jest, as the move to ESM can cause compatibility problems.

Source: Faker v9 Upgrade Guide, Faker v10 Upgrade Guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[amazon-inspector-ohio]

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

[snyk-io-us]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[amazon-inspector-ohio]

✅ I finished the code review, and didn't find any security or code quality issues.