[Snyk] Upgrade @snyk/dep-graph from 2.8.1 to 2.9.1

[igor-enso]

Snyk has created this PR to upgrade @snyk/dep-graph from 2.8.1 to 2.9.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.

• The recommended version was released 21 days ago.

Release notes

Package name: @snyk/dep-graph

• 2.9.1 - 2025-11-11
  

  2.9.1 (2025-11-11)

  Bug Fixes

  • upgrade packageurl-js dependency (c1953dc)
• 2.9.0 - 2024-06-05
  

  2.9.0 (2024-06-05)

  Features

  • Update CODEOWNERS (a8827c2)
• 2.8.1 - 2024-01-09
  

  2.8.1 (2024-01-09)

  Bug Fixes

  • lock down packageurl-js version (b31ee12)

from @snyk/dep-graph GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Missing Lockfile Update The PR updates the @snyk/dep-graph version in package.json, but the corresponding update to package-lock.json is missing from the provided diff. Please ensure the lockfile is regenerated and committed to lock the new version (2.9.1) and ensure deterministic builds across environments. "@snyk/dep-graph": "^2.9.1",

📚 Repository Context Analyzed This review considered 14 relevant code sections from 4 files (average relevance: 0.78) package.json (relevance: 0.96, lines 1-87) package-lock.json (relevance: 0.82, 11 segments, lines 701-800) jest.config.js (relevance: 0.75, lines 1-30) appveyor.yml (relevance: 0.74, lines 1-35)