fix(deps): restore patched lockfile resolutions

[brendan-kellam]

Summary

• restore yarn.lock from the commit immediately before feat(backend): add BullMQ JobManager framework #1427 and regenerate it against the current workspace manifests
• retain the JobManager BullMQ and ioredis dependencies while removing stale transitive entries carried by the long-lived feature branch
• restore previously patched dependency resolutions, including tar, js-yaml, shell-quote, brace-expansion, fast-uri, and related packages

Root cause

During the feature branch merge from main, Yarn auto-resolved the conflicted lockfile by preferring the feature branch entries for duplicate descriptors. Those older but semver-compatible resolutions then survived subsequent installs and regressed previously applied CVE fixes.

Testing

• yarn install --immutable
• git diff --check

---

Note

^{Cursor Bugbot is generating a summary for commit 2a95156. Configure here.}

[github-actions]

@brendan-kellam your pull request is missing a changelog!

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 5ca0d23a-0094-4a8f-bdf6-316d665f1558

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}