chore: bump versions (security)

[GordonSmith]

Checklist:

• The commit message is properly formatted and free of typos.
  • The commit message title makes sense in a changelog, by itself.
  • The commit message includes a "fixes" reference if appropriate.
  • The commit is signed.
• The change has been fully tested:
  • I have viewed all related gallery items
  • I have viewed all related dermatology items
• There are no similar instances of the same problem that should be addressed
  • I have addressed them here
  • I have raised new issues to address them separately

Testing:

[Copilot]

Pull request overview

This PR performs a comprehensive security-focused version bump of dependencies across the monorepo, updating multiple development and production dependencies to their latest patch/minor versions.

Changes:

• Updates root-level development tools (ESLint, TypeScript ESLint, Playwright, Vite, Rimraf) to latest versions
• Updates package-specific dependencies across multiple @hpcc-js packages (Preact, Lumino, Observable, lit-html, React, webpack tooling, and WASM packages)
• Updates demo applications to use latest internal @hpcc-js package versions

Reviewed changes

Copilot reviewed 12 out of 13 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
package.json	Updates root development dependencies including Vite 7.3.1 (requires Node.js 20.19.0+), Playwright 1.58.0, ESLint 9.39.2, and TypeScript ESLint 8.53.1
package-lock.json	Comprehensive lockfile update with new resolved versions and integrity hashes for all updated dependencies
packages/react/package.json	Updates Preact from 10.27.3 to 10.28.2
packages/phosphor/package.json	Updates @lumino/widgets from 2.7.2 to 2.7.3
packages/observablehq-compiler/package.json	Updates @observablehq/notebook-kit from 1.5.0 to 1.5.1
packages/markdown-it-plugins/package.json	Updates tsx from 4.20.6 to 4.21.0
packages/graph/package.json	Updates @hpcc-js/wasm-graphviz from 1.17.0 to 1.20.0 and lit-html from 3.3.1 to 3.3.2
packages/esbuild-plugins/package.json	Updates vite-plugin-static-copy, @hpcc-js/wasm-base91, and @hpcc-js/wasm-zstd versions
packages/dgrid2/package.json	Updates React ecosystem from 19.2.0/19.2.2 to 19.2.3/19.2.9 and react-data-grid from beta.58 to beta.59
packages/dgrid-shim/package.json	Updates webpack from 5.102.1 to 5.104.1, terser-webpack-plugin from 5.3.14 to 5.3.16, and string-replace-loader
packages/comms/package.json	Updates undici from 7.18.2 to 7.19.1 and soap from 1.6.0 to 1.6.3
demos/gallery/package.json	Updates internal @hpcc-js package version references to latest versions
demos/imdb/package.json	Updates internal @hpcc-js package version references to latest versions

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.