Fix security vulnerabilities 2026-03

[cmark]

This PR fixes the following security vulnerabilities by bumping the corresponding dependencies to the patched versions:

• GHSA-xxh7-fcf3-rj7f
• GHSA-72hv-8253-57qq

[nagyo]

LGTM!

[nagyo]

🍏

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.19%. Comparing base (8922f0b) to head (d811327).
⚠️ Report is 9 commits behind head on 10.x.

Additional details and impacted files

@@             Coverage Diff              @@
##               10.x    #1470      +/-   ##
============================================
- Coverage     64.19%   64.19%   -0.01%     
  Complexity    12808    12808              
============================================
  Files          1617     1617              
  Lines         57664    57664              
  Branches       5676     5676              
============================================
- Hits          37019    37018       -1     
- Misses        18256    18258       +2     
+ Partials       2389     2388       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.