Patch URI parsing and HTML sanitization dependencies

[poiley]

Updates the version-scoped fast-uri and sanitize-html overrides to 3.1.6 and 2.17.7 and regenerates the dependency lockfile, addressing URI parsing and HTML sanitization advisories.

Validation: make node-check cli-check go-check shared-check passed, including 730 Node SDK tests, 726 CLI tests, Go checks, and shared compatibility tests across Node, Python, and Go. Generated files remain unchanged.

[github-actions]

docfacts impact

This PR also touches evidence for 4 verified claims — no action needed unless behavior changed; the nightly scan re-verifies automatically.

details

• ✅ The repository is a polyglot monorepo containing independent SDK packages for Node, Python, and Go. (docs/repo-model.md ← pnpm-workspace.yaml)
• ✅ No root-level language workspace owns all three SDKs. (docs/repo-model.md ← pnpm-workspace.yaml)
• ✅ The sdk-node/ directory is an npm package managed with pnpm. (docs/repo-model.md ← pnpm-workspace.yaml)
• ✅ The root pnpm-workspace.yaml defines a pnpm workspace covering only the Node packages cli-node, sdk-node, and packages/*, and does not govern the Python or Go SDKs. (docs/repo-model.md ← pnpm-workspace.yaml)

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge; the dependency overrides and regenerated lockfile consistently select the intended patched versions.

No actionable regression remains: all changed resolution paths agree on fast-uri 3.1.6 and sanitize-html 2.17.7, while unrelated advisory findings concern dependency versions that were already present in the base revision.

Important Files Changed

Filename	Overview
pnpm-workspace.yaml	Updates the fast-uri and sanitize-html override ranges and targets to the intended patched releases.
pnpm-lock.yaml	Consistently records the updated overrides and resolved dependency versions without unrelated resolution changes.

_{Reviews (1): Last reviewed commit: "Patch URI parsing and HTML sanitization ..." | Re-trigger Greptile}