fix(deps): update file-type and uuid, fixes #1774

[lihbr]

Resolves: #1774

Updates file-type and internal dependencies not to rely on vulnerable versions of uuid

Relies on:

• https://github.com/prismicio/prismic-types-internal-v3/pull/146
• https://github.com/prismicio/prismic-api-renderer/pull/58
• https://github.com/prismicio/prismic-mocks/pull/43

---

Note

Medium Risk
Wide dependency bumps across mocks/types-internal and a major file-type jump affect screenshot MIME detection and mock generation; CI audit is now non-blocking, which slightly reduces gate strength on remaining advisories.

Overview
This PR bumps dependencies to address #1774 (vulnerable uuid in the dependency tree), mainly by upgrading file-type in @slicemachine/manager and aligning the monorepo on newer @prismicio/types-internal (^3.17.2), @prismicio/mocks (^2.16.1), and @prismicio/mock (0.7.2), with a root resolutions pin for types-internal.

GroupItemContent now expects a key on each group item: adapter slice template mocks (AlternateGrid, CustomerLogos across Next/Nuxt/SvelteKit) gain UUID key fields, and mockSlice assigns randomUUID() when synthesizing empty group items.

CI sets continue-on-error: true on the workspace audit step so high-severity audit noise does not block the pipeline while upgrades land. scripts/play.ts pins the Next minimal starter to a specific commit (still using slicemachine.config.json) and extends cloneGitRepo to support shallow fetch/checkout by commit. start-slicemachine bumps vite to 5.4.21; yarn.lock reflects the full transitive graph (e.g. file-type 21.x, uuid 11.x).

^{Reviewed by Cursor Bugbot for commit 5228b00. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
slice-machine	Ready	Preview	Jul 16, 2026 6:07am

[lihbr]

See: yarnpkg/yarn#9234

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 6d40f04. Configure here.}