🔒 fix: Upgrade Vulnerable Low Severity Build Dependencies

[dustinhealy]

Summary

Upgrade three transitive build dependencies to patched releases: @babel/core 7.29.6, browserslist 4.28.7, and baseline-browser-mapping 2.11.0. Package overrides keep all resolution paths on the patched versions.

The fourth reviewed dependency, form-data, already resolves to patched version 4.0.6 on the base branch, so it requires no change here.

Change Type

• Bug fix (non-breaking change which fixes an issue)

Testing

• bun install --frozen-lockfile
• bun run lint
• bunx tsc --noEmit
• bun run test — 27 files, 1,215 tests passed
• bun run build — client and server bundles built
• Verified resolved versions in bun.lock and with a direct Babel transform plus Browserslist default-target query
• Built server returned 200 for /health and /; browser sign-in, Dashboard, and Configuration loaded
• Development server compiled the login page and performed a server reload after a source touch
• Manual dev-mode sign-in succeeded against the repository's mock backend; Dashboard and Help loaded, and the dashboard remained usable after hot reload
• Browser login suite: 20 passed against the mock backend after a local correction to an outdated Sign In button selector; the correction was reverted and is not part of this PR
• git diff --check

Areas to test manually

• Build and release workflow: run a clean install and production build, then inspect the generated client and server bundles. This exercises Babel and browser-target selection.
• Production panel: sign in, open Dashboard and Configuration, and reload a route to check that the built assets and server render correctly.
• Development workflow: start the Vite dev server and edit a source file to check compilation and hot reload after the Babel update.

The unmodified browser suite stops in setup because its exact Sign In selector does not match the rendered Sign in button. This pre-existing test selector issue does not affect application sign-in; the temporary local correction allowed all login tests to pass.

Test Configuration:

Bun 1.3.3; local production build served with the repository's server.ts entry point.

Checklist

• My code adheres to this project's style guidelines
• I have performed a self-review of my own code
• My changes do not introduce new warnings
• Local unit tests pass with my changes