PAC-40355: Update @kno2/bluebutton to 0.7.0 + internal dependabot updates

[dapperdandev]

PAC-40355 — C32 preview crash

• @kno2/bluebutton: 0.6.15 → 0.7.0 — picks up the C32 parser fix (C32 parser fix + internal dependabot updates 08-11-2026 bluebutton.js#54) so C32 documents no longer crash the intake CDA preview with "An error occurred while retrieving documents".

Lockfile-only (transitive / security)

• bootstrap: 4.6.0 → 4.6.2 (supersedes Bump bootstrap from 4.6.0 to 4.6.2 #82)
• fast-uri: 3.1.4 → 3.1.5 (supersedes Bump fast-uri from 3.1.4 to 3.1.5 #137)
• js-yaml: 4.3.0 → 4.3.1 (supersedes Bump js-yaml from 4.3.0 to 4.3.1 #138)

Excluded (major npm version — handle separately)

• @babel/core 7.28.5 → 8.0.1, @babel/preset-env 7.28.5 → 8.0.2, @babel/register 7.28.3 → 8.0.1 (Bump @babel/core, @babel/preset-env and @babel/register #127)

Held back

• oxfmt 0.63.0 requires a CONTRIBUTING.md reformat, so it stays at 0.57.0 to keep this PR deps-only; bump it with the doc reformat in a separate pass.

package-lock.json was reconciled with npm and verified stable: a fresh npm install produces no further changes. npm run build, lint, and format:check all pass.

Jira: PAC-40355

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Updates the project’s npm dependencies to pick up a fix in @kno2/bluebutton that prevents C32 documents from crashing the CDA preview, along with reconciled lockfile-only security/transitive updates.

Changes:

• Bump @kno2/bluebutton from 0.6.15 to 0.7.0.
• Refresh package-lock.json to include updated transitive/security dependencies (notably bootstrap@4.6.2, fast-uri@3.1.5, js-yaml@4.3.1).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates direct dependency @kno2/bluebutton to 0.7.0.
package-lock.json	Reconciles lockfile to the updated dependency set and pulls in transitive/security bumps (bootstrap/fast-uri/js-yaml).

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.