From 8c4fb8faf263f0336840aa39ff8616b713bedf61 Mon Sep 17 00:00:00 2001
From: Koosha Paridehpour <42529354+KooshaPari@users.noreply.github.com>
Date: Fri, 4 Sep 2026 22:34:23 -0700
Subject: [PATCH] chore(deps): pin browserslist override to ^4.28.8 (#12592)

Merged. One line in `overrides`, low blast radius, and pinning a transitive that every build tool reads is defensible on its own.

Validated on `release/v3.8.51`: `package.json` re-parses, `typecheck:core` clean, `check-file-size` OK.

For future dependency pins, a line in the body about what the floating range actually broke (a specific build failure, a CVE, a resolution conflict) makes these reviewable without guessing. Thanks.
---
 package.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package.json b/package.json
index 4925d88658..da12740fb9 100644
--- a/package.json
+++ b/package.json
@@ -463,6 +463,7 @@
     "unrs-resolver": true
   },
   "overrides": {
+    "browserslist": "^4.28.8",
     "onnxruntime-node": "1.24.3",
     "eslint-plugin-react-hooks": "7.1.1",
     "fast-xml-parser": "^5.10.1",