chore(deps): bump deps for 1.9.9 CVEs

[JessicaJHee]

Description

Bumps transitive dependencies to address CVEs for RHDH 1.9.9.

Package	Version	CVEs
fast-uri	3.1.3 → 3.1.7	CVE-2026-75975, CVE-2026-75899, CVE-2026-6322, CVE-2026-75931, CVE-2026-76172, CVE-2026-84394, CVE-2026-84292
@xmldom/xmldom	0.8.13 → 0.8.15	CVE-2026-83605, CVE-2026-83608, CVE-2026-83613, CVE-2026-83614, CVE-2026-83615, CVE-2026-83619, CVE-2026-83607, CVE-2026-83616
undici	6.27.0 → 7.29.1	CVE-2026-19534
[DEV] handlebars	4.7.8 → 4.7.9	CVE-2026-33937, CVE-2026-33938, CVE-2026-33941
[DEV] nodemailer (not PROD)	7.0.12 → 7.0.13	CVE-2026-82659
[DEV] fflate (not PROD)	0.8.2 → 0.8.3	CVE-2026-45820
[Partial Patch] dompurify	3.4.12 → 3.4.14	CVE-2026-75838, vulnerable v3.4.8 pinned by monaco-editor

Fixed with yarn up -R in root and dynamic-plugins.

Which issue(s) does this PR fix

@xmldom/xmldom tickets:

• Fixes RHIDP-16704
• Fixes RHIDP-16706
• Fixes RHIDP-16707
• Fixes RHIDP-16710
• Fixes RHIDP-16712
• Fixes RHIDP-16737
• Fixes RHIDP-16757
• Fixes RHIDP-16799

fast-uri tickets:

• Fixes RHIDP-16771
• Fixes RHIDP-16779
• Fixes RHIDP-16593
• Fixes RHIDP-16602
• Fixes RHIDP-16639
• Fixes RHIDP-16648

undici:

• Fixes RHIDP-16810

PR acceptance criteria

Please make sure that the following steps are complete:

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

[github-actions]

The container image build workflow finished with status: cancelled.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: cancelled.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

The container image build workflow finished with status: failure.

[openshift-ci]

@JessicaJHee: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-ocp-helm	30dcff7	link	true	/test e2e-ocp-helm

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.