chore(deps): update dependency svgo to v4.0.2

[thomhurst]

This PR contains the following updates:

Package	Type	Update	Change
svgo (source)	resolutions	patch	4.0.1 → 4.0.2

---

Release Notes

svg/svgo (svgo)

v4.0.2

Compare Source

What's Changed

Security

• removeScripts, remove JavaScript URIs case-insensitively and make <script> handling namespace aware. By @​SethFalco

Bug Fixes

• convertColors, skip case-normalization for CSS custom properties. By @​SethFalco in #​2213
• convertPathData, improve handling of consecutive t commands. By @​KTibow in #​2156
• convertPathData, safer handling of paths. By @​KTibow in #​2158
• Improve parsing of negative (or +) arc radii. By @​KTibow in #​2205
• When converting to a data URI, only encode it as a data URI once. By @​johnkenny54 in #​2053

Performance

• mergePaths, speed up child node removal. By @​mozzie in #​2216

Other Changes

• removeAttributesBySelector, log warning and noop if missing parameters. By @​KTibow in #​2215

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[claude]

Code Review

This is a trivial Renovate-generated dependency bump: svgo 4.0.1 → 4.0.2 in docs/package.json and the corresponding docs/yarn.lock entry. It's a devDependency used for SVG optimization in the docs build only — no application/engine code is touched.

Changes verified:

• docs/package.json: svgo pinned version bumped 4.0.1 → 4.0.2.
• docs/yarn.lock: resolved version, tarball URL, and integrity hash updated consistently; the svgo@^3.0.2, svgo@^3.2.0 range aliases remain correctly merged with the exact svgo@4.0.2 entry.

Upstream changes in 4.0.2 (per release notes): a security fix in removeScripts (case-insensitive JS URI removal, namespace-aware <script> handling), several bug fixes in convertColors/convertPathData/arc radius parsing, and a mergePaths perf improvement. All backward-compatible patch-level fixes.

Assessment: No architectural or design concerns — this is a mechanical, low-risk lockfile/version update scoped to the docs site's build tooling, with no source code changes to review. Safe to merge (automerge is already enabled per the PR description).