Update command-line-usage to ^7.0.3 to resolve @75lb/deep-merge security vulnerability

[sunilrathore24]

Description

@web/test-runner@0.20.2 currently uses command-line-usage@^7.0.1, which has a transitive dependency on a vulnerable version of @75lb/deep-merge@1.1.1 (prototype pollution vulnerability).

Current Dependency Chain

@web/test-runner@0.20.2
└── command-line-usage@7.0.1
    └── table-layout@3.0.2
        └── @75lb/deep-merge@^1.1.1 (VULNERABLE)

Proposed Solution

Update to command-line-usage@^7.0.3 which uses table-layout@^4.1.0 that has removed the vulnerable dependency entirely.

Security Impact

• Vulnerability: Prototype Pollution in @75lb/deep-merge@1.1.1
• CVE Reference: Prototype Pollution vulnerability affecting 75lb/deep-merge@1.1.1 75lb/deep-merge#1
• Current Workaround: Using yarn resolutions to force @75lb/deep-merge@1.1.2

Versions

• @web/test-runner: 0.20.2
• command-line-usage current: 7.0.1
• command-line-usage latest: 7.0.3