fix(deps): refresh supported graph and packaged action

[Jamie-BitFlight]

Refresh the current Yarn 1.22.22 graph within the existing manifest ranges and rebuild both committed action artifacts. This resolves the stale transitive security patches without changing the Jira API major or adding overrides.

Verification: frozen reinstall, 22 unit tests, Biome lint and Rollup build pass locally on Node 24.19.0. Audit falls from 40 distinct advisories to four, with no runtime dependency advisory remaining in this audit. CI must verify frozen install, bundle parity and real Jira behavior on this head.

Remaining advisories are explicitly assessed:

• GHSA-r3ph-w7gj-g6xm (js-yaml) and GHSA-r4xh-jqrq-34v2 (smol-toml): latest markdownlint-cli 0.49.1 pins affected minor lines. They parse linter configuration; this repository explicitly uses its tracked JSONC .markdownlint.json, not attacker-provided YAML/TOML.
• GHSA-vfj7-8cjw-p6xm (braces): latest commitizen 4.3.2 reaches find-node-modules/findup-sync/micromatch. No patched braces version exists. The repository's git-cz path searches the fixed node_modules pattern, not action input.
• GHSA-238p-pmpm-9mq7 (KaTeX): markdownlint's math tooling; exploitation requires pre-existing prototype pollution plus inserting rendered HTML into a web page. The action does not use this development graph or render KaTeX HTML.

No overrides added, audit errors suppressed, or workflows disabled. These residuals require reassessment when upstream supported dependency ranges change.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-11T00:49:12.893686Z	1d72b1e	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 9b9ec160-bf98-41b1-87c8-526922bc350e

---

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

💡 Codex Review

github-action-jira-transition-manager/dist/index.js

Line 8732 in 1d72b1e

kClß_uóM�Ê׬¢h­µçX�Ü���ÏÈ

Rebuild the corrupted action bundle

Every action invocation loads this file through action.yml, but at byte 393216 (this line) the bundle changes from JavaScript to non-UTF-8 binary data. Running node dist/index.js or node --check dist/index.js as an ES module raises a SyntaxError here, so the action fails before reading inputs or contacting Jira; replace this artifact with the complete Rollup output and regenerate its source map.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".