Dependabot: Bump brace-expansion,fast-uri,immutable,js-yaml,nanoid,postcss

[Jack Morris (rudolphjacksonm)]

Partially addresses #5034

What is being addressed

This PR updates several packages identified by dependabot, while leaving the reactor dom router upgrade out for a separate, larger piece of work.

How is this addressed

Updates the following package versions:

• brace-expansion: 1.1.14 → 1.1.18
• fast-uri: 3.1.2 → 3.1.5
• immutable: 5.1.5 → 5.1.9
• js-yaml: 4.3.0 → 4.3.1
• nanoid: 3.3.12 → 3.3.18
• postcss: 8.5.15 → 8.5.26

[github-actions]

Unit Test Results

241 tests   241 ✅  26s ⏱️
 27 suites    0 💤
  1 files      0 ❌

Results for commit 9e6ee2e.

♻️ This comment has been updated with latest results.

[Jack Morris (rudolphjacksonm)]

/test

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/32858456395 (with refid b13e1996)

(in response to this comment from Jack Morris (@rudolphjacksonm))

[Copilot]

Pull request overview

Updates several transitive UI dependencies while deferring React Router’s major upgrade.

Changes:

• Updates six dependency versions in the UI lockfile.
• Increments the UI patch version.
• Adds an unreleased changelog entry.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.

File	Description
ui/app/package.json	Bumps UI version to 0.8.32.
ui/app/package-lock.json	Updates six transitive dependencies.
CHANGELOG.md	Documents dependency updates.

Files not reviewed (1)

• ui/app/package-lock.json: Generated file

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated no new comments.

Files not reviewed (1)

• ui/app/package-lock.json: Generated file

Suppressed comments (1)

CHANGELOG.md:6

• Add the related PR/issue reference required for changelog entries. Nearby entries consistently use this format (for example, CHANGELOG.md:10, :12, and :16-20), but this new entry has no traceable reference.

* Update UI dependencies: `brace-expansion` to 1.1.18, `fast-uri` to 3.1.5, `immutable` to 5.1.9, `js-yaml` to 4.3.1, `nanoid` to 3.3.18, and `postcss` to 8.5.26. ([#5056](https://github.com/microsoft/AzureTRE/pull/5056))

[Copilot]

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated no new comments.

Files not reviewed (1)

• ui/app/package-lock.json: Generated file

[Jack Morris (rudolphjacksonm)]

/test

[github-actions]

🤖 pr-bot 🤖

🏃 Running tests: https://github.com/microsoft/AzureTRE/actions/runs/32888368995 (with refid b13e1996)

(in response to this comment from Jack Morris (@rudolphjacksonm))