chore: update dependabot triage output

[WebeWizard]

Adds initial Dependabot triage artifacts for 27 open alerts across the WebeWizard/lib-webe repository.

Summary

All 27 alerts affect transitive npm devDependencies in package-lock.json. The vulnerable packages are pulled in through two direct dependencies:

Top-level dep	Vulnerable transitive packages
gulp	tar, minimatch, fsevents, minimist, decode-uri-component, copy-props, y18n, ini, yargs-parser, braces, es5-ext
node-elm-compiler	lodash, minimatch

Alert Breakdown by Package

Package	Alert #s	Severity
tar	#51, #50, #45, #43, #41, #40, #36, #35, #20, #17, #16	high
minimatch	#49	high
lodash	#42, #27, #6	medium/high
fsevents	#26	critical
minimist	#23, #22, #14, #13	critical/medium
braces	#30	high
es5-ext	#29	low
decode-uri-component	#12	high
copy-props	#10	high
y18n	#5	high
ini	#4	high
yargs-parser	#3	medium

Recommended Owner

All triage artifacts recommend Justin Leis (justin.leis@webewizard.com) based on git blame evidence — the sole author of gulpfile.coffee, gulpfile.js, and package.json.

Changed Files

27 new files added under .triage-agent/dependabot/:

• alert-{number}-{package-slug}.json for each open alert

Generated by Dependabot Triage Agent · ◷

---

Note

This was originally intended as a pull request, but PR creation failed. The changes have been pushed to the branch triage/dependabot-2026-03-15-6cf61664d70ac49f.

Original error: Resource not accessible by personal access token

To create the pull request manually:

gh pr create --title "chore: update dependabot triage output" --base master --head triage/dependabot-2026-03-15-6cf61664d70ac49f --repo WebeWizard/lib-webe

Show patch preview (500 of 1452 lines)

From b6ec36e3e52c5696ca5004fa6cf20abe024835f9 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Sun, 15 Mar 2026 00:54:37 +0000
Subject: [PATCH] chore: add dependabot triage artifacts for 27 open alerts

Generated triage JSON files for all open Dependabot alerts.
All vulnerabilities are in transitive npm devDependencies,
primarily introduced via 'gulp' and 'node-elm-compiler'.
Recommended owner: Justin Leis (justin.leis@webewizard.com).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 .../dependabot/alert-10-copy-props.json       | 46 ++++++++++++++++
 .../alert-12-decode-uri-component.json        | 46 ++++++++++++++++
 .../dependabot/alert-13-minimist.json         | 46 ++++++++++++++++
 .../dependabot/alert-14-minimist.json         | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-16-tar.json    | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-17-tar.json    | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-20-tar.json    | 46 ++++++++++++++++
 .../dependabot/alert-22-minimist.json         | 46 ++++++++++++++++
 .../dependabot/alert-23-minimist.json         | 46 ++++++++++++++++
 .../dependabot/alert-26-fsevents.json         | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-27-lodash.json | 36 +++++++++++++
 .../dependabot/alert-29-es5-ext.json          | 46 ++++++++++++++++
 .../dependabot/alert-3-yargs-parser.json      | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-30-braces.json | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-35-tar.json    | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-36-tar.json    | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-4-ini.json     | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-40-tar.json    | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-41-tar.json    | 46 ++++++++++++++++
 .triage-agent/dependabot/alert-42-lodash.json | 36 +++++++++++++
 .triage-agent/dependabot/alert-43-tar.json    | 46 +++
... (truncated)