Security: Upgrade Scriban from 6.2.0 to address known vulnerabilities

[dnyw4l3n13]

Summary

Package Scriban 6.2.0 has multiple known vulnerabilities. Currently suppressed in src/BuildBot/BuildBot.csproj pending upgrade.

CVEs to address

• GHSA-24c8-4792-22hx (high)
• GHSA-5rpf-x9jg-8j5p (moderate)
• GHSA-5wr9-m6jw-xx44 (critical)
• GHSA-c875-h985-hvrc (high)
• GHSA-grr9-747v-xvcp (high)
• GHSA-m2p3-hwv5-xpqw (moderate)
• GHSA-p6q4-fgr8-vx4p (high)
• GHSA-v66j-x4hw-fv9g (high)
• GHSA-wgh7-7m3c-fx25 (high)
• GHSA-x6m9-38vm-2xhf (high)
• GHSA-xcx6-vp38-8hr5 (high)
• GHSA-xw6w-9jjh-p9cr (moderate)

Action required

Upgrade Scriban to a version that resolves all listed advisories and remove the suppression entries.