Bump serialize-javascript to 7.0.5 to fix GHSA-5c6j-r48x-rmvq

[chagong]

Summary

Bumps serialize-javascript from 6.0.2 to 7.0.5 (via npm override) to address GHSA-5c6j-r48x-rmvq — a high severity RCE vulnerability through unescaped RegExp.flags and Date.prototype.toISOString().

Changes

• Added overrides section in package.json to pin serialize-javascript to exactly 7.0.5
• Regenerated package-lock.json

[chagong]

@copilot bump up to 7.0.5 directly.

[Copilot]

@copilot bump up to 7.0.5 directly.

Done — changed the override from ^7.0.3 to exactly 7.0.5 in package.json and regenerated package-lock.json (commit 4f2e884).