fix: update mdast-util-to-hast to >= 13.2.1 to address CVE-2025-66400

[roomote]

This PR updates mdast-util-to-hast to version 13.2.1 or higher to address security vulnerability CVE-2025-66400 (GHSA-4fh9-h7wg-q85m).

Changes

• Added pnpm override for mdast-util-to-hast >= 13.2.1 in package.json
• Updated pnpm-lock.yaml to use mdast-util-to-hast@13.2.1 (previously used 13.2.0 and 10.2.0)

Testing

• ✅ All lint checks pass
• ✅ All type checks pass
• ✅ Verified mdast-util-to-hast@13.2.1 is used throughout the lockfile

---

View task on Roo Code Cloud

---

Important

Update mdast-util-to-hast to >=13.2.1 to fix CVE-2025-66400.

• Security Update:
  • Updated mdast-util-to-hast to >=13.2.1 in package.json to address CVE-2025-66400.
  • Updated pnpm-lock.yaml to use mdast-util-to-hast@13.2.1.
• Testing:
  • All lint and type checks pass.
  • Verified mdast-util-to-hast@13.2.1 is consistently used in the lockfile.

^{This description was created by for 40376cd. You can customize this summary. It will automatically update as commits are pushed.}

[roomote]

Rooviewer   See task on Roo Cloud

Review complete. No issues found.

This is a clean security patch that properly addresses CVE-2025-66400 by adding a pnpm override for mdast-util-to-hast >= 13.2.1. The lockfile has been correctly updated to use the patched version throughout.

_{Mention @roomote in a comment to request specific changes to this pull request or fix all unresolved issues.}