fix(deps): resolve audit findings and consolidate dependabot updates

[sergak01]

Summary

• Resolve all npm audit findings across the root package and every tests/* sandbox by bumping vulnerable overrides (brace-expansion, minimatch, qs) and refreshing lockfiles.
• Apply the remaining open Dependabot PRs in one pass: esbuild, jsdom, typescript, vite, vitest, next, and the Docker node:26-alpine image bump.
• Keep test fixture overrides aligned with the audited root dependency policy so npm run audit:all stays clean.

Dependabot PRs superseded

Closes #123, #142, #149, #151, #152, #153, #154, #155, #156, #157, #158, #159

Test plan

• npm run audit:all — 0 vulnerabilities in root, tests/test-commonjs, tests/test-nextjs, tests/test-nextjs-cjs
• npm run test:unit — 159/159 passed
• npm run test:integration
• npm run build

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 182b5e86-837b-48e1-a6f2-19570a092769

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch pp-3487

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}