[Snyk] Fix for 1 vulnerabilities

[qbey]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• server/package.json
• server/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-BRACEEXPANSION-18313044	710

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[qbey]

This upgrade involves major version bumps for both bcrypt and rimraf, introducing breaking changes related to Node.js version support.

bcrypt 5.1.1 → 6.0.0

• Breaking Change: Support for Node.js versions 16 and older has been dropped. [2]
• Impact: This is an environment change. Projects running on Node.js 16 or below must upgrade their runtime to use this version of bcrypt.
• Source: Changelog [2]

rimraf 5.0.10 → 6.1.1

• Breaking Change: This version requires Node.js 20 or a version greater than or equal to 22. [5, 9]
• Impact: This is a significant environment change, as support for Node.js 18 and 19 has been removed. [7] Projects must be running on a compatible Node.js version.
• Source: Package documentation [5, 9]

Recommendation:
Verify that your project's Node.js version meets the new requirements of both packages (>=20 for rimraf). If not, you must upgrade your Node.js environment before applying this dependency update.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 635c5f78-3e92-4b4a-b69d-8f0e4e23d12b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}