CCM-17044: Dependency Updates

[gareth-allan]

Summary

This PR updates several dependencies in order to resolve reported vulnerabilities.

Security fixes

• Added overrides to some of mocha's dependencies in sandbox/package.json
• handlebars → ^4.7.9
• flatted → ^3.4.2
• postcss → ^8.5.12
• lodash → ^4.18.1
• underscore → ^1.13.8
• cryptography → 47.0.0
• pyjwt → 2.12.1
• certifi → 2026.4.22

Notable upgrades

• eslint-plugin-sonarjs 3.0.5 → 4.0.3 (also resolved the minimatch ReDoS vulnerability)
• eslint-plugin-security 1.5.0 → 4.0.0
• newman 6.2.1 → 6.2.2
• chai 5.1.1 → 6.2.0 (sandbox)
• requests 2.32.5 → 2.33.1
• playwright 1.57.0 → 1.59.0
• urllib3 2.6.2 → 2.6.3

Skipped upgrades
eslint-plugin-unicorn 56 → 62 (requires ESLint 9)

Reviews Required

• Dev
• Test
• Tech Author
• Product Owner

Checklist

• Brief description of work completed, and any technical decisions made as part of the PR
• PR link added as a comment to the relevant JIRA ticket: CCM-17044
• PR link shared on Slack and/or Teams
• 2 reviews received
• Tester approval

[github-actions]

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-17044

[github-actions]

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-17044

[github-actions]

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-17044

[github-actions]

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-17044

[github-actions]

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-17044

[github-actions]

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-17044

[github-actions]

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-17044

[github-actions]

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-17044

[github-actions]

This branch is work on a ticket in the NHS Digital APM JIRA Project. Here's a handy link to the ticket:

CCM-17044