fix(deps): resolve all fixable pnpm audit advisories (#79)

pnpm audit reported 56 advisories (1 critical, 40 high, 14 moderate,
1 low), all of them in transitive dev/tooling dependencies.

- Bump vitest and @vitest/coverage-v8 to 4.1.11 (GHSA-82fw-gwwq-j7x9,
  path traversal in @vitest/mocker).
- Add pnpm overrides pinning the remaining transitive packages to
  patched versions: @xmldom/xmldom, baseline-browser-mapping,
  brace-expansion (1.x and 5.x), browserslist, js-yaml (3.x and 4.x),
  nanoid, postcss, shell-quote, uuid, ws (7.x and 8.x).

Re-resolving the tree also drops the unused esbuild 0.27.3 optional
peer of vite (GHSA-g7r4-m6w7-qqqr), which nothing in the workspace
requires.

Remaining after this change: two image-size advisories
(GHSA-w3rx-r6r6-pgpr, GHSA-5p2g-fcmc-qvqq) that have no patched
release upstream. It is a metro/expo dependency of the playground app
only and is never part of the published SDK.

Verified with pnpm lint, pnpm check-types, pnpm test, pnpm build and
pnpm test:coverage.


Claude-Session: https://claude.ai/code/session_0199vMNGkiRE4yFkvs2sGENL

Co-authored-by: Claude <noreply@anthropic.com>

Author: mattinannt

package.json

@@ -18,7 +18,19 @@
   },
   "pnpm": {
     "overrides": {
-      "@xmldom/xmldom": "0.9.10"
+      "@xmldom/xmldom": "0.9.12",
+      "baseline-browser-mapping": "2.11.23",
+      "brace-expansion@1": "1.1.18",
+      "brace-expansion@5": "5.0.9",
+      "browserslist": "4.28.9",
+      "js-yaml@3": "3.15.2",
+      "js-yaml@4": "4.3.2",
+      "nanoid@3": "3.3.19",
+      "postcss": "8.5.28",
+      "shell-quote": "1.10.0",
+      "uuid@7": "11.1.1",
+      "ws@7": "7.5.13",
+      "ws@8": "8.21.3"
     }
   },
   "packageManager": "pnpm@10.33.0",

packages/react-native/package.json

@@ -48,13 +48,13 @@
   "devDependencies": {
     "@types/node": "24.7.2",
     "@types/react": "19.2.14",
-    "@vitest/coverage-v8": "4.1.2",
+    "@vitest/coverage-v8": "4.1.11",
     "react": "19.2.4",
     "react-native": "0.84.1",
     "typescript": "6.0.2",
     "tsc-alias": "1.8.16",
     "vite": "8.0.16",
-    "vitest": "4.1.2"
+    "vitest": "4.1.11"
   },
   "peerDependencies": {
     "@react-native-async-storage/async-storage": ">=2.1.0",