Component Governance Update to FURN Repo

[Dewsk]

Platforms Impacted

• iOS
• macOS
• win32 (Office)
• windows
• android

Description of changes

Updating multiple packages for component governance.

Verification

(how the change was tested, including both manual and automated tests)

Before	After
Screenshot or description before this change	Screenshot or description with this change

Pull request checklist

This PR has considered (when applicable):

• Automated Tests
• Documentation and examples
• Keyboard Accessibility
• Voiceover
• Internationalization and Right-to-left Layouts

[Dewsk]

@copilot resolve the merge conflicts in this pull request

[Dewsk]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Addressed in 7756454.

[Dewsk]

@microsoft-github-policy-service agree company="Microsoft"

[Copilot]

Pull request overview

This PR updates the repo’s dependency governance by pinning/overriding a set of transitive dependencies via Yarn resolutions and refreshing the lockfile to match, aiming to standardize versions used across the monorepo.

Changes:

• Added/expanded root package.json resolutions to pin specific dependency versions (e.g., @xmldom/xmldom, axios, esbuild, ws, etc.).
• Updated yarn.lock to reflect the new resolved dependency graph and versions.
• Introduced additional resolved packages required by the updated dependency set (e.g., https-proxy-agent@5 → agent-base@6).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Adds/updates Yarn resolutions entries to enforce governance-pinned dependency versions.
yarn.lock	Lockfile refresh aligning the resolved dependency versions with the new resolutions.