build(deps): fix critical vitest and shell-quote advisories, refresh stale overrides

apps/wallet/src/components/SessionExpiredOverlay.spec.ts

@@ -46,20 +46,23 @@ describe('SessionExpiredOverlay', () => {
   it('shows a spinner while authenticating', async () => {
     const wrapper = mount(SessionExpiredOverlay);
     const sessionStore = useSessionStore();
-    sessionStore.signIn = vi.fn(() => Promise.resolve());
+    // The spinner only exists while signIn is in flight, so the promise is resolved by hand
+    // after the assertion instead of resolving on the next microtask.
+    let completeSignIn!: () => void;
+    sessionStore.signIn = vi.fn(() => new Promise<void>(resolve => (completeSignIn = resolve)));
     sessionStore.$patch({
       reauthenticationNeeded: true,
     });
     await wrapper.vm.$nextTick();
 
     const reauthenticateButton = wrapper.getComponent(VBtn);
 
-    reauthenticateButton.trigger('click');
-
-    await wrapper.vm.$nextTick();
+    await reauthenticateButton.trigger('click');
 
     const spinner = wrapper.findComponent(VProgressCircular);
 
     expect(spinner.exists()).toBe(true);
+
+    completeSignIn();
   });
 });

cli/package.json

@@ -19,6 +19,6 @@
     "@dfinity/candid": "1.4.0",
     "@dfinity/identity": "1.4.0",
     "@dfinity/principal": "1.4.0",
-    "vitest": "1.6.1"
+    "vitest": "3.2.6"
   }
 }

docs/package.json

@@ -28,6 +28,6 @@
     "astro": "5.18.1",
     "playwright": "1.55.1",
     "rehype-mermaid": "3.0.0",
-    "sharp": "0.33.5"
+    "sharp": "0.35.0"
   }
 }

package.json

@@ -33,22 +33,30 @@
       "flatted@<=3.4.1": "^3.4.2",
       "h3@<=1.15.8": "^1.15.9",
       "devalue@<=5.6.3": "^5.6.4",
-      "immutable@>=4.0.0-rc.1 <4.3.8": "^4.3.8",
-      "dompurify@>=3.1.3 <=3.3.1": "^3.3.2",
+      "immutable@>=4.0.0-rc.1 <4.3.9": "^4.3.9",
+      "dompurify@>=3.1.3 <=3.4.12": "^3.4.13",
       "minimatch@^3": "3.1.5",
       "minimatch@^5": "5.1.9",
       "minimatch@^9": "9.0.9",
       "rollup@>=4.0.0 <4.59.0": "^4.59.0",
       "chokidar@>=5.0.0": "4.0.3",
-      "form-data@<4.0.4": "^4.0.4",
+      "form-data@<4.0.6": "^4.0.6",
       "picomatch@>=2.0.0 <2.3.2": "2.3.2",
       "lodash-es@<4.18.0": "^4.18.1",
-      "brace-expansion@^1": "1.1.13",
+      "brace-expansion@^1": "1.1.16",
       "brace-expansion@^2": "2.0.3",
       "lodash@<4.18.0": "^4.18.1",
-      "axios@<1.8.2": "^1.8.2",
+      "axios@<1.18.0": "^1.18.0",
       "defu@<6.1.5": "^6.1.5",
-      "vite@>=6.0.0 <6.4.2": "^6.4.2"
+      "vite@>=6.0.0 <6.4.3": "^6.4.3",
+      "shell-quote@<1.9.0": "^1.9.0",
+      "js-yaml@^3": "3.15.1",
+      "js-yaml@^4": "4.3.1",
+      "postcss@<8.5.23": "^8.5.23",
+      "ws@>=8.0.0 <8.21.0": "^8.21.0",
+      "svgo@>=4.0.0 <4.0.2": "^4.0.2",
+      "mermaid@>=11.0.0-alpha.1 <11.16.1": "^11.16.1",
+      "sharp@<0.35.0": "^0.35.0"
     }
   },
   "devDependencies": {
@@ -62,7 +70,7 @@
     "@types/node": "22.7.4",
     "@typescript-eslint/eslint-plugin": "8.23.0",
     "@typescript-eslint/parser": "8.23.0",
-    "@vitest/coverage-v8": "1.6.1",
+    "@vitest/coverage-v8": "3.2.6",
     "concurrently": "8.2.2",
     "eslint-config-prettier": "9.1.0",
     "eslint-plugin-astro": "1.3.1",
@@ -72,8 +80,8 @@
     "nx": "19.8.3",
     "prettier": "3.3.3",
     "typescript": "5.6.2",
-    "vite": "5.4.21",
-    "vitest": "1.6.1",
+    "vite": "6.4.3",
+    "vitest": "3.2.6",
     "vue-tsc": "2.1.6"
   }
 }