chore(security): address CVE-2026-33532

[tido64]

Description

Not quite sure what we needed @nx/js for but it's unused and pulls in an older version of yaml.

Platforms affected

• Android
• iOS
• macOS
• visionOS
• Windows

Test plan

n/a

[tido64]

Never mind. Turns out this is required for release.

  yarn nx release --dry-run
  shell: /usr/bin/bash -e {0}
  env:
    HOMEBREW_NO_INSTALL_CLEANUP: 1
    NODE_OPTIONS: --disable-proto=delete
    VisualStudioVersion: 17.0
    WindowsTargetPlatformVersion: 10.0.26100.0
    NPM_CONFIG_USERCONFIG: /home/runner/work/_temp/.npmrc
    NODE_AUTH_TOKEN: XXXXX-XXXXX-XXXXX-XXXXX

 NX   Unable to resolve the default "versionActions" implementation for project "react-native-test-app" at path: "@nx/js/src/release/version-actions"


- If this is a JavaScript/TypeScript project, it is likely that you simply need to install the "@nx/js" plugin.

- If this not a JavaScript/TypeScript project, you can should provide an alternative "versionActions" implementation path via the "release.version.versionActions" configuration option.

Pass --verbose to see the stacktrace.