Security and dependency updates

[rezrah]

Summary

Part of https://github.com/github/primer/issues/2297

Updates all monorepo depenencies to their latest patch/minor versions and fixes various critical security vulnerabilities, as reported by Dependabot. This should close most - if not all - open Dependabot pull requests.

This is step one of a wider effort to bring the repo up-to-date and reduce the number of security alerts.

List of notable changes:

• Before: 75 outdated dependencies

• After: 45 outdated dependencies (all major)

• Typescript has been upgraded from 4.6 to 4.9, which includes stricter typing around ReactElements.

• Fixes a11y violation around tabIndex on SubdomainNavBar

What should reviewers focus on?

• Checking builds pass CI and integration checks
• Review the documentation and verify it still works as expected
• Review Storybook

Steps to test:

1. Open the preview deployment links here
2. Navigate between all (or most) stories and documentation pages
3. Verify that components appear the way they should

Contributor checklist:

• All new and existing CI checks pass
• Tests prove that the feature works and covers both happy and unhappy paths
• Any drop in coverage, breaking changes or regressions have been documented above
• New visual snapshots have been generated / updated for any UI changes
• All developer debugging and non-functional logging has been removed
• Related issues have been referenced in the PR description

Reviewer checklist:

• Check that pull request and proposed changes adhere to our contribution guidelines and code of conduct
• Check that tests prove the feature works and covers both happy and unhappy paths
• Check that there aren't other open Pull Requests for the same update/change

Screenshots:

Please try to provide before and after screenshots or videos

Before	After

[changeset-bot]

🦋 Changeset detected

Latest commit: a366661

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 6 packages

Name	Type
@primer/brand-primitives	Patch
@primer/react-brand	Patch
@primer/brand-e2e	Patch
@primer/brand-fonts	Patch
@primer/brand-config	Patch
@primer/brand-storybook	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[github-actions]

🟢 No design token changes found

[github-actions]

🟢 No visual differences found

Our visual comparison tests did not find any differences in the UI.

[josepmartins]

LGTM! 👍