chore: regenerate pnpm-lock.yaml with elliptic override

Add pnpm.overrides.elliptic to prevent version regression on
the transitive elliptic vulnerability (CVE-2025-14505).

Vulnerability path:
@kinvolk/headlamp-plugin → vite-plugin-node-polyfills →
node-stdlib-browser → crypto-browserify → browserify-sign → elliptic

Note: pnpm audit will still report the vulnerability until
upstream publishes elliptic 6.6.2+. This override safeguards
against pulling a worse version.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

artifacthub-pkg.yml

@@ -57,7 +57,7 @@ changes:
   - kind: added
     description: ExemptionManager test suite — full coverage of annotation-based exemption flows
   - kind: fixed
-    description: E2E infrastructure overhauled — ConfigMap volume mount replaces Dockerfile-based approach, tests run in headlamp-dev namespace
+    description: E2E infrastructure overhauled — ConfigMap volume mount replaces Dockerfile-based approach, tests run in privilegedescalation-dev namespace
   - kind: fixed
     description: E2E workflow uses token auth and waits for HTTP reachability before running tests
   - kind: fixed

package.json

@@ -38,7 +38,8 @@
       "flatted": "^3.4.2",
       "lodash": ">=4.18.0",
       "picomatch": ">=4.0.4",
-      "vite": ">=6.4.2"
+      "vite": ">=6.4.2",
+      "elliptic": ">=6.6.1"
     }
   },
   "devDependencies": {

pnpm-lock.yaml

@@ -11,6 +11,7 @@ overrides:
   lodash: '>=4.18.0'
   picomatch: '>=4.0.4'
   vite: '>=6.4.2'
+  elliptic: '>=6.6.1'
 
 importers: