[Snyk] Upgrade @snyk/dep-graph from 2.9.0 to 2.9.1

[honeyp-snyk]

Snyk has created this PR to upgrade @snyk/dep-graph from 2.9.0 to 2.9.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.

• The recommended version was released 21 days ago.

Release notes

Package name: @snyk/dep-graph

• 2.9.1 - 2025-11-11
  

  2.9.1 (2025-11-11)

  Bug Fixes

  • upgrade packageurl-js dependency (c1953dc)
• 2.9.0 - 2024-06-05
  

  2.9.0 (2024-06-05)

  Features

  • Update CODEOWNERS (a8827c2)

from @snyk/dep-graph GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Missing Lockfile Update The PR updates a dependency version in package.json, but the provided diff does not show a corresponding update to package-lock.json. In Node.js projects, the lockfile must be kept in sync with the manifest to ensure deterministic builds and to prevent failures during npm ci. Please verify that package-lock.json is included in this Pull Request. "@snyk/dep-graph": "^2.9.1",

📚 Repository Context Analyzed This review considered 12 relevant code sections from 2 files (average relevance: 0.78) package.json (relevance: 0.94, lines 1-100) package-lock.json (relevance: 0.81, 11 segments, lines 4701-4800)

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}