chore(deps): run npm audit fix to refresh package-lock.json

[skl]

Related Issue or Design Document

Refreshing the dev-only npm package lock file to address the following CVEs using standard tooling npm audit fix:

• CVE-2022-25883
• CVE-2024-52798
• CVE-2025-5889

Dockertest is not vulnerable because these are dev-only packages used by the license workflow in CI only. Updating purely to clear false positives on downstream scanners.

Checklist

• I have read the contributing guidelines and signed the CLA.
• I have referenced an issue containing the design document if my change introduces a new feature.
• I have read the security policy.
• I confirm that this pull request does not address a security vulnerability.
  If this pull request addresses a security vulnerability,
  I confirm that I got approval (please contact security@ory.com) from the maintainers to push the changes.
• I have added tests that prove my fix is effective or that my feature works.
• I have added the necessary documentation within the code base (if appropriate).

Further comments

I added "name": "dockertest" to package.json to make the package-lock.json generate with the same name every time (otherwise it just takes the name of the current directory, which could be random in the case of git worktrees).

Summary by CodeRabbit

• Chores
  • Package configured with name "dockertest"

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 5a73e50e-ac0f-4626-8772-35b183436a7e

📥 Commits

Reviewing files that changed from the base of the PR and between 927ba36 and 68fa57f.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (1)

• package.json

---

📝 Walkthrough

Walkthrough

The package.json file is updated to define the package name as "dockertest". This single line addition establishes the package name metadata for the project.

Changes

Package Metadata Configuration

Layer / File(s)	Summary
Package name definition package.json	The name field in package.json is set to "dockertest".

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~1 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change—running npm audit fix to refresh package-lock.json—which aligns with the primary objective stated in the PR description.
Description check	✅ Passed	The description provides clear context for the CVE updates, explains why the change is safe, and documents the package.json name addition. It follows the template structure with populated sections and completed checklist items.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}