fix: github dependabot fixes

[ashwin1111]

Dependencies / lockfile (package.json or pnpm-lock.yaml)

• This change is either a new dependency, an upgrade, or a removal, and the reason is clear (Required)
• If this is a new dependency, it is necessary and was checked to ensure it does not have any known vulnerabilities
• If this is an upgrade, the upgraded version was checked to ensure it does not have any known vulnerabilities
• If this is an upgrade, breaking changes were reviewed, especially for major version bumps
• Dependency security scan for this change has passed, or any reported issues are explicitly documented and approved (Required)

Scripts, engines, version, or package manager (package.json)

• Changes to scripts, engines, packageManager, or package version were reviewed for CI impact, unsafe commands, runtime behavior, and release impact (Required)

If pnpm-workspace.yaml changed

• Any newly added entry in allowBuilds was reviewed and is safe (Required)
• Any newly introduced pnpm setting or policy was reviewed and does not weaken security (https://pnpm.io/settings) (Required)

[Copilot]

Pull request overview

Updates the project’s dependency and packaged distribution to incorporate Dependabot-driven security/maintenance fixes, primarily by upgrading undici and regenerating the bundled dist output used by the GitHub Action.

Changes:

• Bump undici override from 7.24.5 to 7.28.0 and reflect it in the lockfile.
• Add trustPolicyExclude entries for specific Octokit transitive packages.
• Regenerate dist/index.js and update the action runtime to node24.

Reviewed changes

Copilot reviewed 2 out of 4 changed files in this pull request and generated no comments.

File	Description
pnpm-workspace.yaml	Updates undici override and adds trustPolicyExclude configuration.
pnpm-lock.yaml	Updates lockfile entries to align with undici@7.28.0 override.
dist/index.js	Regenerated bundle output reflecting updated dependencies (notably undici).
action.yml	Updates the JavaScript action runtime to node24.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 5 changed files in this pull request and generated 2 comments.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

[JustARatherRidiculouslyLongUsername]

we should probably update these node versions in this repo's CI - also the node version in package.json for local dev

[github-actions]

Test Coverage	%	values
Statements	100%	( 10 / 10 )
Branches	100%	( 1 / 1 )
Functions	100%	( 3 / 3 )
Lines	10%	( 9 / 10 )

[github-actions]

End to End Test Coverage	%	values
Statements	100%	( 10 / 10 )
Branches	100%	( 1 / 1 )
Functions	100%	( 3 / 3 )
Lines	19%	( 9 / 10 )

[github-actions]

🔁 Code Duplication Report - JavaScript

Format	Files analyzed	Total lines	Total tokens	Clones found	Duplicated lines	Duplicated tokens
json	4	399	2462	1	17 (4.26%) -18.41% 🚀	95 (3.86%) -18.44% 🚀
yaml	9	396	2213	1	29 (7.32%) -0.14% 🚀	183 (8.27%) -0.08% 🚀
javascript	1	94	871	0	0 (0.00%)	0 (0.00%)
markdown	1	48	506	0	0 (0.00%)	0 (0.00%)
Total:	15	937	6052	2	46 (4.91%) -2.68% 🚀	278 (4.59%) -2.37% 🚀

🎉 This PR reduces duplicated code by 2.37%!

[Copilot]

Pull request overview

Copilot reviewed 6 out of 8 changed files in this pull request and generated 1 comment.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file