Stop deployment log polling after cancellation, Update configuration in rollback command and Update snyk vulnerabilities

[chhavi-mandowara-cstk]

fix: stop deployment log polling after cancellation
fix: ensure Apollo client is rebuilt after configuration update in rollback command (csdx launch:rollback)
chore: pin brace-expansion and fast-uri via npm overrides to resolve Snyk vulnerabilities
chore: pin js-yaml via npm override to resolve Snyk high-severity finding

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[github-actions]

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	0	0	25	✅ Passed
🟡 Medium Severity	0	0	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	Breaches (with fixes)	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	0	15 / 30 days	✅ Passed
🟠 High	0	0	30 / 120 days	✅ Passed
🟡 Medium	0	0	90 / 365 days	✅ Passed
🔵 Low	0	0	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

[Copilot]

Pull request overview

This PR updates log polling behavior and deployment status handling (including CANCELLED), rebuilds API clients after rollback configuration changes, and applies npm overrides to address Snyk-reported vulnerabilities.

Changes:

• Update serverless log polling to use getServerlessLogsV2 and treat CANCELLED as a terminal deployment status (including adapter exit behavior).
• Ensure rollback rebuilds API clients after configuration is loaded/updated.
• Add npm overrides (and lockfile updates) to pin vulnerable transitive dependencies.

Reviewed changes

Copilot reviewed 13 out of 14 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
test/unit/util/logs-polling-utilities.test.ts	Update unit test fixture data to match getServerlessLogsV2 response shape.
src/util/logs-polling-utilities.ts	Switch server log extraction to data.getServerlessLogsV2.logs.
src/util/logs-polling-utilities.test.ts	Add Jest coverage for cancellation stopping polling and validate config includes CANCELLED.
src/graphql/queries.ts	Update serverless logs GraphQL query to GetServerlessLogsV2 / getServerlessLogsV2.
src/config/index.ts	Add CANCELLED to terminal deploymentStatus list.
src/commands/launch/rollback.ts	Rebuild API clients after config load (rollback flow).
src/commands/launch/logs.ts	Fix environment selection to set deployments for the selected environment (not the first).
src/adapters/github.ts	Exit non-zero when deployment is FAILED or CANCELLED.
src/adapters/github.test.ts	Add test coverage for CANCELLED exit behavior.
src/adapters/file-upload.ts	Exit non-zero when deployment is FAILED or CANCELLED.
src/adapters/file-upload.test.ts	Add test coverage for CANCELLED exit behavior.
package.json	Add overrides pins for fast-uri, js-yaml, and brace-expansion via minimatch selectors.
package-lock.json	Lockfile updates reflecting override/pin changes.
.talismanrc	Update checksum for modified package-lock.json.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	0	0	25	✅ Passed
🟡 Medium Severity	0	0	500	✅ Passed
🔵 Low Severity	0	0	1000	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	Breaches (with fixes)	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	0	15 / 30 days	✅ Passed
🟠 High	0	0	30 / 120 days	✅ Passed
🟡 Medium	0	0	90 / 365 days	✅ Passed
🔵 Low	0	0	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

[Copilot]

Pull request overview

Copilot reviewed 9 out of 10 changed files in this pull request and generated no new comments.

Suppressed comments (1)

src/commands/launch/rollback.ts:58

• prepareApiClients() is now called in init() and again unconditionally in run(), which causes redundant client recreation (and the added blank line includes trailing whitespace that can fail linting). Since the intent is to rebuild clients only after getConfig() updates the shared config, call prepareApiClients() inside that conditional instead of unconditionally.

    if (!this.flags.environment) {
      await this.getConfig();
    }
    
    await this.prepareApiClients();