fix(security): raise esbuild, js-yaml, and dompurify override floors across JS workspaces

docs/pnpm-workspace.yaml

@@ -8,18 +8,19 @@ overrides:
   minimatch@>=9.0.0 <9.0.7: 9.0.7
   vite@>=6.0.0 <=6.4.1: '>=6.4.2'
   vite@>=8.0.0 <8.0.16: '>=8.0.16'
+  esbuild@<0.28.1: '>=0.28.1'
   rollup@>=4.0.0 <4.59.0: '>=4.59.0'
   flatted@<3.4.2: '>=3.4.2'
   react-router@>=7.0.0 <7.12.0: '>=7.12.0'
   picomatch@<2.3.2: 2.3.2
   picomatch@>=4 <4.0.4: 4.0.4
   '@hono/node-server@<1.19.13': 1.19.13
   glob@>=10.2.0 <10.5.0: 10.5.0
-  dompurify@<3.4.0: '>=3.4.0'
+  dompurify@<3.4.11: '>=3.4.11'
   mermaid@>=11.0.0 <11.15.0: '>=11.15.0'
   uuid@<11.1.1: '>=11.1.1 <12'
   brace-expansion@>=5.0.0 <5.0.6: '>=5.0.6'
   postcss@<8.5.10: '>=8.5.10'
   yaml@>=2.0.0 <2.8.3: '>=2.8.3'
-  js-yaml@>=4.0.0 <4.1.1: '>=4.1.1'
+  js-yaml@>=4.0.0 <4.2.0: '>=4.2.0 <5'
   mdast-util-to-hast@>=13.0.0 <13.2.1: '>=13.2.1'

javascript/package.json

@@ -133,7 +133,10 @@
   },
   "overrides": {
     "protobufjs@>=8.0.0 <8.6.0": ">=8.6.0",
-    "protobufjs@<7.6.3": ">=7.6.3 <8"
+    "protobufjs@<7.6.3": ">=7.6.3 <8",
+    "esbuild@<0.28.1": ">=0.28.1",
+    "js-yaml@>=3.0.0 <3.15.0": ">=3.15.0 <4",
+    "js-yaml@>=4.0.0 <4.2.0": ">=4.2.0 <5"
   },
   "pnpm": {
     "overrides": {
@@ -162,7 +165,10 @@
       "@ungap/structured-clone@<1.3.1": ">=1.3.1",
       "shell-quote@<1.8.4": ">=1.8.4",
       "uuid@<11.1.1": ">=11.1.1 <12",
-      "ws@<8.21.0": ">=8.21.0"
+      "ws@<8.21.0": ">=8.21.0",
+      "esbuild@<0.28.1": ">=0.28.1",
+      "js-yaml@>=3.0.0 <3.15.0": ">=3.15.0 <4",
+      "js-yaml@>=4.0.0 <4.2.0": ">=4.2.0 <5"
     }
   }
 }