fix(security): upgrade vulnerable production dependencies - #8126

PR #8126 did not pass CI / Pull Request attempt 1 (failure), so no E2E run was dispatched.

Jobs that did not pass:

• reviewed-npm-audit — failed step: Audit reviewed production npm graphs.
• cli-test-shards (8) — failed step: Run CLI coverage shard.
• cli-tests — failed step: Verify CLI shards completed.
• checks — failed step: Verify required PR checks.