[DEL-430] Bump multiple low-risk dependencies

[tjdavey]

Bumps and deduplicates multiple low-risk dependencies in the lockfile. This does not require a release as its lockfile changes only and does not impact downstream consumers - It only impacts development and CI dependencies.

[changeset-bot]

⚠️ No Changeset found

Latest commit: fe62e0e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[deepsource-io]

DeepSource Code Review

We reviewed changes in 17a0de2...fe62e0e on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene   Coverage

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Sep 17, 2026 1:25a.m.	Review ↗
Code coverage		Sep 17, 2026 1:25a.m.	Review ↗
Secrets		Sep 17, 2026 1:25a.m.	Review ↗

Code Coverage Summary

Language	Line Coverage (Overall)
Aggregate	63.7%
Javascript	63.7%

➟ Additional coverage metrics may have been reported. See full coverage report ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.