Dependency security updates (#1225)

## Fix Dependabot Security Vulnerabilities

This PR addresses multiple Dependabot security alerts by updating
vulnerable dependencies to their patched versions.

**Key Changes:**

* Updated various direct and transitive dependencies including `cookie`,
`esbuild`, `brace-expansion`, `tmp`, `js-yaml`, `body-parser`, and
`mdast-util-to-hast`.
* Updated `@sentry/*` packages across the workspace via catalog updates
and direct dependency bumps in `packages/spotlight/package.json`.
* Introduced `pnpm.overrides` in the root `package.json` to ensure
`vite` versions `6.0.0-6.3.5` are upgraded to `6.3.6+` to mitigate
reported CVEs, specifically targeting transitive `vite` dependencies
brought in by `astro`.

**Verification:**

*   Build and lint tasks pass successfully.
* Existing test failures in `docker-compose.test.ts` are noted as
pre-existing and unrelated to these dependency updates.

---------

Co-authored-by: Cursor Agent <[email protected]>

Author: BYK

package.json

@@ -30,7 +30,19 @@
     "cross-spawn": ">=7.0.5",
     "form-data": ">=4.0.4",
     "devalue": ">=5.3.2",
-    "next": "^15.4.8"
+    "next": "^15.4.8",
+    "cookie": ">=0.7.0",
+    "esbuild": ">=0.25.0",
+    "brace-expansion": ">=2.0.2 <3",
+    "tmp": ">=0.2.4",
+    "js-yaml": ">=4.1.1",
+    "body-parser": ">=2.2.1",
+    "mdast-util-to-hast": ">=13.2.1"
+  },
+  "pnpm": {
+    "overrides": {
+      "vite@>=6.0.0 <6.3.6": ">=6.3.6"
+    }
   },
   "simple-git-hooks": {
     "pre-commit": "pnpm exec lint-staged --concurrent false"

packages/spotlight/package.json

@@ -77,9 +77,9 @@
     "@radix-ui/react-dropdown-menu": "^2.1.15",
     "@radix-ui/react-slot": "^1.2.3",
     "@radix-ui/react-tooltip": "^1.2.7",
-    "@sentry/browser": "^10.26.0",
-    "@sentry/electron": "^7.3.0",
-    "@sentry/react": "^10.26.0",
+    "@sentry/browser": "^10.31.0",
+    "@sentry/electron": "^7.5.0",
+    "@sentry/react": "^10.31.0",
     "@sentry/vite-plugin": "^2.22.5",
     "@shikijs/transformers": "^3.13.0",
     "@tailwindcss/vite": "catalog:",