fix: [validator] Upgrade validator from 13.5.2 to 13.15.x to resolve CVE-2025-12758

[devin-ai-integration]

Summary

Resolves a High (CVSS 8.7) Snyk SCA finding in the direct dependency validator.

• Vulnerability: Incomplete Filtering of One or More Instances of Special Elements
• CVE: CVE-2025-12758 · Snyk ID: SNYK-JS-VALIDATOR-13653476
• Severity: High (CVSS 8.7)
• Package: validator@13.5.2 (direct dependency)
• Fixed in: 13.15.22

Change

- "validator": "^13.5.2"
+ "validator": "^13.15.35"   // satisfies >=13.15.22; stays within major 13 (no breaking change)

package-lock.json updated accordingly (lockfile version preserved at 2).

Verification

snyk test after the bump reports 0 remaining validator vulnerabilities.

Reference: https://security.snyk.io/vuln/SNYK-JS-VALIDATOR-13653476

Generated by the scheduled Snyk MCP security scan (Snyk org 9e26acce…).

Link to Devin session: https://app.devin.ai/sessions/8d13ec8d010540e3b119dc5073862335
Requested by: @hannahhuh-cog

---

Devin Review

Status	Commit
⚪ Not started	—

Run Devin Review

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring