Remove serialize-javascript override when mocha releases a fix

[TomerFi]

Context

mocha@11.7.5 depends on serialize-javascript@^6.0.2, which resolves to 6.0.2 — vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() (GHSA-5c6j-r48x-rmvq).

Since no patched version of mocha is available, we added an npm override forcing serialize-javascript@^7.0.3 for mocha.

Action

Once mocha releases a version that depends on serialize-javascript@^7.0.3 natively, remove the override from package.json.

[TomerFi]

Override added in #399.

[coderabbitai]

🔗 Related PRs

#391 - fix: override yargs to v18 for Node 25 compatibility [merged]
#394 - fix: override @conventional-changelog/git-client to ^2.0.0 for CVE-2025-59433 [closed]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!