fix: [Vuln #10] upgrade dustjs-linkedin 2.5.0 → 2.7.5 (CVE-2021-4264 - Prototype Pollution)

[devin-ai-integration]

Summary

Upgrades dustjs-linkedin from 2.5.0 to 2.7.5 to remediate CVE-2021-4264 (HIGH - Prototype Pollution). Also upgrades dustjs-helpers from 1.5.0 to 1.7.4 for compatibility (dustjs-helpers 1.7.4 supports dustjs-linkedin 2.7–2.8).

Changes:

• dustjs-linkedin: 2.5.0 → 2.7.5
• dustjs-helpers: 1.5.0 → 1.7.4
• Updated package-lock.json accordingly

Review & Testing Checklist for Human

• Verify npm ls dustjs-linkedin dustjs-helpers shows the correct versions (2.7.5 and 1.7.4)
• Confirm Dust.js template rendering still works (check views using .dust templates)
• Run npm install cleanly with no errors

Notes

• Intentionally chose 2.7.5 instead of 3.0.0 since dustjs-helpers@1.7.4 only supports the 2.7–2.8 range.
• This is Snyk vulnerability fix(credentials): Remediate hard-coded credentials in production code (S2068, S6437) #10 from the scan results.

Link to Devin session: https://app.devin.ai/sessions/1b9d10ca6a334a7d95acb6794fbfbbb0
Requested by: @jakejluo

---

Devin Review

Status	Commit
⚪ Not started	—

Run Devin Review

💡 Connect your GitHub account to enable automatic code reviews.

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring