Chore: Resolve vulnerabilities in transitive NPM dependencies

[imrraaj]

What

This PR adds overrides in package.json to address security vulnerabilities reported by Dependabot and npm audit.

Why

Fixes dependabot alerts

How

Testing Instructions

Screenshots

Additional Info

Checklist

• I have read the Contribution Guidelines.
• I have read the Development Guidelines.
• My code is tested to the best of my abilities.
• My code passes all lints (ESLint etc.).
• My code has detailed inline documentation.
• I have updated the project documentation as needed.

[Copilot]

Pull request overview

Updates JavaScript dependency resolutions to address reported security vulnerabilities and refreshes the plugin’s release metadata to 1.0.2.

Changes:

• Add/extend npm overrides (incl. minimatch, serialize-javascript, and ajv for @wp-playground/*) to remediate audit/Dependabot alerts.
• Regenerate package-lock.json with updated transitive dependency graph.
• Bump plugin version references to 1.0.2 (plugin header, constant, readme stable tag, changelog).

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
readme.txt	Updates “Stable tag” to 1.0.2.
package.json	Adds new overrides to mitigate vulnerable transitive packages.
package-lock.json	Reflects the resolved dependency updates from the new overrides/install.
onelogs.php	Bumps plugin header version and ONELOGS_VERSION constant to 1.0.2.
CHANGELOG.md	Adds 1.0.2 entry describing the dependency update.

Comments suppressed due to low confidence (1)

package.json:88

• The new overrides entries use open-ended version ranges (e.g., >=10.2.1, >=7.0.3, >=8.18.0). Since these ranges don’t cap the major version, a future lockfile refresh could unexpectedly jump to a new major release (e.g., minimatch 11 / ajv 9) and introduce breaking changes. Consider pinning to an explicit version or at least a major-bounded range (e.g., ^10.2.1, ^7.0.3, ^8.18.0) to keep upgrades more predictable while still addressing the audit alerts.

		"webpack-dev-server@<=5.2.0": ">=5.2.1",
		"minimatch": ">=10.2.1",
		"serialize-javascript": ">=7.0.3",
		"@wp-playground/blueprints": {
			"ajv": ">=8.18.0"
		},
		"@wp-playground/tools": {
			"ajv": ">=8.18.0"
		},
		"@wp-playground/cli": {
			"ajv": ">=8.18.0"
		}

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.