Add workiva_dependency_constrainer

[sourcegraph-wk]

Summary

In order to make the upgrade to analyzer 5 more predictable, Frontend Frameworks is adding a dev dependency on a new package workiva_dependency_constrainer which constrains analyzer to ^2, mockito to '>=5.0.0 <5.3.0' and meta to '>=1.6.0 <1.10.0'

Once analyzer 5 ready packages for over_react, dart_storybook, puppeteer_platform, and json_serializable_3_5_2 are released and tested, then a newer version of the constrainer will be released to unpin analyzer and mockito. This will prevent repos from upgrading in an unpredictable order or time and keeps things how they are until we're all ready to upgrade at the same time.

As part of this batch, the pin on mockito and meta in this repo will be removed, since they are now handled by the constrainer. The extra dependency validator ignores on meta and mockito are also removed.

For more info, reach out to #support-frontend-dx on Slack.

_Created by Sourcegraph batch change Workiva/add_wdc._

[aviary3-wk]

Security Insights

No security relevant content was detected by automated scans.

Action Items

• Review PR for security impact; comment "security review required" if needed or unsure

• Verify aviary.yaml coverage of security relevant code

  Questions or Comments? Reach out on Slack: #support-infosec.