fix(deps): lock undici to fix 3 high and 4 medium vulnerabilities

[guoda-puidokaite]

Summary

• Fixed 3 high and 4 medium from 1 package - jsdom.
• No upgrade for jsdom (devDependency last published 2 months ago).
• Locked undici transitive dependency causing the issue.

Related Issues

• https://github.com/cloudoperators/juno/security/dependabot/227
• https://github.com/cloudoperators/juno/security/dependabot/226
• https://github.com/cloudoperators/juno/security/dependabot/224
• https://github.com/cloudoperators/juno/security/dependabot/223
• https://github.com/cloudoperators/juno/security/dependabot/228
• https://github.com/cloudoperators/juno/security/dependabot/229
• https://github.com/cloudoperators/juno/security/dependabot/225

Checklist

• I have performed a self-review of my code.
• I have commented my code, particularly in hard-to-understand areas.
• I have added tests that prove my fix is effective or that my feature works.
• New and existing unit tests pass locally with my changes.
• I have made corresponding changes to the documentation (if applicable).
• My changes generate no new warnings or errors.
• I have created a changeset for my changes.

PR Manifesto

Review the PR Manifesto for best practises.

[changeset-bot]

⚠️ No Changeset found

Latest commit: f2e54c3

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[Copilot]

Pull request overview

This PR aims to remediate reported jsdom-related vulnerabilities by forcing a safer undici version via pnpm overrides, and updating the lockfile to reflect the new resolution.

Changes:

• Added a pnpm override for undici in the root package.json.
• Updated pnpm-lock.yaml to resolve undici to 8.6.0 (and associated dependency graph adjustments).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 4 comments.

File	Description
package.json	Adds a pnpm override intended to pin/raise undici to address transitive vulnerabilities.
pnpm-lock.yaml	Applies the override in the resolved dependency graph, updating undici and other affected resolutions.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file