chore(DF-859): migrate eslint to v9 flat config and fix vulnerabilites

[mokhld]

Description

• fast-xml-parser >=5.3.8: Overrides the version pinned by @aws-sdk/xml-builder (a transitive dependency of @aws-sdk/client-sqs) to resolve GHSA-fj3w-jwp8-x2g3, a high-severity stack overflow vulnerability. AWS hasn’t bumped their dependency yet (New Vulnerability on fast-xml-parser aws/aws-sdk-js-v3#7797), though comments indicate the fix has been added and will be released shortly.
• serialize-javascript >=7.0.3: Overrides the version pinned by copy-webpack-plugin and terser-webpack-plugin to resolve GHSA-5c6j-r48x-rmvq, a high-severity RCE vulnerability via RegExp.flags and Date.prototype.toISOString().
• tmp >=0.2.4: Overrides the version used by useragent (via @hapi/scooter) to resolve GHSA-g2q5-5433-rhrf, a high-severity TOCTOU race condition vulnerability. useragent hasn’t updated its dependency.

The remaining two moderate-severity useragent ReDoS vulnerabilities (GHSA-mgfv-m47x-4wqp) have no fix available. useragent@2.3.0 is the latest version and the package is unmaintained. It is pulled in by @hapi/scooter.

Running npm audit will show:

# npm audit report

useragent  *
Severity: moderate
useragent Regular Expression Denial of Service vulnerability - https://github.com/advisories/GHSA-mgfv-m47x-4wqp
No fix available
node_modules/useragent
  @hapi/scooter  *
  Depends on vulnerable versions of useragent
  node_modules/@hapi/scooter

2 moderate severity vulnerabilities

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud