chore(deps): upgrade packages and align test sandboxes

- Bump root dependencies (TypeScript 6, file-type 22, Vitest/Playwright, etc.);
  pin jsdom to 28.0.0 and esbuild to ^0.27.7 for toolchain compatibility.
- Ship scripts/patch-npm-bundled-vulnerabilities.mjs in npm files so reinstall works.
- Refresh test-commonjs, test-nextjs, and test-nextjs-cjs lockfiles and overrides.

Author: sergak01

package-lock.json

@@ -70,7 +70,7 @@
     "@xmldom/xmldom": ">=0.8.12",
     "brace-expansion": "5.0.5",
     "chokidar": "^5.0.0",
-    "file-type": "^21.3.3",
+    "file-type": "^22.0.0",
     "minimatch": "10.2.4",
     "npm": ">=11.12.1",
     "serialize-javascript": ">=7.0.5",
@@ -86,37 +86,37 @@
     }
   },
   "dependencies": {
-    "axios": "^1.13.6",
+    "axios": "^1.14.0",
     "cac": "^7.0.0",
     "chokidar": "^5.0.0",
     "deepmerge-ts": "^7.1.5",
     "diff-match-patch": "^1.0.5",
     "dir-compare": "^5.0.0",
     "ejs": "^5.0.1",
-    "esbuild": "^0.27.4",
+    "esbuild": "^0.27.7",
     "express": "^5.2.1",
     "extract-zip": "^2.0.1",
-    "file-type": "^21.3.3",
+    "file-type": "^22.0.0",
     "formdata-node": "^6.0.3",
     "http-proxy-middleware": "^3.0.5",
     "isbinaryfile": "^6.0.0",
-    "jsdom": "^29.0.0",
+    "jsdom": "28.0.0",
     "memory-cache": "^0.2.0",
     "picocolors": "^1.1.1",
-    "rollup": "^4.59.0",
-    "sass": "^1.98.0",
+    "rollup": "^4.60.1",
+    "sass": "^1.99.0",
     "sharp": "^0.34.5",
     "source-map-support": "^0.5.21",
     "svgo": "^4.0.1",
     "svgtofont": "^6.5.1",
-    "typescript": "^5.9.3",
-    "vite": "^8.0.1",
+    "typescript": "^6.0.2",
+    "vite": "^8.0.3",
     "vite-plugin-image-optimizer": "^2.0.3",
     "vite-plugin-zip-pack": "^1.2.4",
     "winston": "^3.19.0"
   },
   "devDependencies": {
-    "@playwright/test": "^1.58.2",
+    "@playwright/test": "^1.59.1",
     "@rollup/plugin-terser": "^1.0.0",
     "@rollup/plugin-typescript": "^12.3.0",
     "@rollup/plugin-url": "^8.0.2",
@@ -126,26 +126,27 @@
     "@types/diff-match-patch": "^1.0.36",
     "@types/ejs": "^3.1.5",
     "@types/express": "^5.0.6",
-    "@types/jsdom": "^28.0.0",
+    "@types/jsdom": "^28.0.1",
     "@types/memory-cache": "^0.2.6",
-    "@types/node": "^25.5.0",
-    "@vitest/coverage-v8": "^4.1.0",
+    "@types/node": "^25.5.2",
+    "@vitest/coverage-v8": "^4.1.2",
     "connect": "^3.7.0",
-    "next": "^16.2.0",
+    "next": "^16.2.2",
     "prettier": "^3.8.1",
     "rimraf": "^6.1.3",
-    "rollup-plugin-dts": "^6.4.0",
+    "rollup-plugin-dts": "^6.4.1",
     "rollup-plugin-scss": "^4.0.1",
     "rollup-plugin-visualizer": "7.0.1",
     "semantic-release": "^25.0.3",
     "tslib": "^2.8.1",
     "tsx": "^4.21.0",
-    "vitest": "^4.1.0",
+    "vitest": "^4.1.2",
     "yargs": "^18.0.0"
   },
   "files": [
     "bin",
     "dist",
+    "scripts/patch-npm-bundled-vulnerabilities.mjs",
     "package.json",
     "README.md",
     "LICENSE.md",