fix(deps): resolve OSV-reported advisories in the lockfile

.github/workflows/security.yml

@@ -34,7 +34,11 @@ jobs:
       # GHSA-5qjj-4xww-7phc. npm-named packages in these lockfiles (the vast majority, including
       # all npm transitives) are covered; JSR-aliased entries are extracted and queried but only
       # match if OSV ever learns the alias.
+      #
+      # osv-scanner.toml holds expiring, per-advisory ignores for advisories with no fixed
+      # release; patched versions are pinned through "overrides" in the root package.json.
       scan-args: |-
+        --config=osv-scanner.toml
         --lockfile=bun.lock
         --lockfile=packages/hyperliquid/.dev/ts7/bun.lock
       # Keep SARIF upload disabled; results are available as a build artifact and

apps/docs/app/layout.tsx

@@ -14,11 +14,7 @@ export const metadata: Metadata = {
 
 export default function RootLayout({ children }: { children: ReactNode }) {
   return (
-    <html
-      lang="en"
-      className={`${sans.variable} ${mono.variable} ${display.variable} dark`}
-      suppressHydrationWarning
-    >
+    <html lang="en" className={`${sans.variable} ${mono.variable} ${display.variable} dark`} suppressHydrationWarning>
       <body>
         <Provider>{children}</Provider>
       </body>