Commit bb7b7d6c523 for woocommerce

commit bb7b7d6c5233038a32a4c71b27236a991d5bfcd0
Author: Ján Mikláš <neosinner@gmail.com>
Date:   Mon Nov 2 17:04:35 2026 +0100

    Update JS runtime dependencies to resolve security alerts (#70421)

    * Bump dompurify to 3.4.17 in sanitize

    * Bump zod to 4 in WooCommerce admin

    * Bump uuid to 11 in components

    * Update fast-uri to 3.1.9

    * Update js-yaml 4 to 4.3.2

    * Update moment to 2.31.0

    * Update postcss-selector-parser 7 to 7.1.7

    * Update qs to 6.16.2 for shipped packages

    Packages that ship qs now resolve 6.16.2. The copy under @wordpress/env
    moves to 6.15.4, the newest version @wp-playground/cli's pinned express
    4.22.2 allows.

    * Update seroval and seroval-plugins to 1.6.8

    * Update source-map-js to 1.2.2

    * Add changelog entries for runtime dependency updates

diff --git a/.syncpackrc b/.syncpackrc
index 4844f823dc0..3b5104f312a 100644
--- a/.syncpackrc
+++ b/.syncpackrc
@@ -560,7 +560,7 @@
 			"packages": [
 				"**"
 			],
-			"pinVersion": "^9.0.1"
+			"pinVersion": "^11.1.1"
 		},
 		{
 			"label": "Testing related dependencies: React 18",
@@ -624,7 +624,7 @@
 			"packages": [
 				"**"
 			],
-			"pinVersion": "3.4.14"
+			"pinVersion": "3.4.17"
 		},
 		{
 			"dependencies": [
diff --git a/packages/js/components/changelog/update-deps-security-js-runtime b/packages/js/components/changelog/update-deps-security-js-runtime
new file mode 100644
index 00000000000..d2dada11dc2
--- /dev/null
+++ b/packages/js/components/changelog/update-deps-security-js-runtime
@@ -0,0 +1,4 @@
+Significance: patch
+Type: update
+
+Update uuid to 11 to fix a reported security issue.
diff --git a/packages/js/components/package.json b/packages/js/components/package.json
index b6a69040665..851103e6111 100644
--- a/packages/js/components/package.json
+++ b/packages/js/components/package.json
@@ -188,7 +188,7 @@
 		"sass-loader": "10.5.x",
 		"ts-jest": "29.1.x",
 		"typescript": "5.7.x",
-		"uuid": "^9.0.1",
+		"uuid": "^11.1.1",
 		"webpack": "catalog:tooling",
 		"webpack-cli": "5.1.x"
 	},
diff --git a/packages/js/sanitize/changelog/update-deps-security-js-runtime b/packages/js/sanitize/changelog/update-deps-security-js-runtime
new file mode 100644
index 00000000000..038a2eeded8
--- /dev/null
+++ b/packages/js/sanitize/changelog/update-deps-security-js-runtime
@@ -0,0 +1,4 @@
+Significance: patch
+Type: update
+
+Update DOMPurify to 3.4.17 to fix reported security issues.
diff --git a/packages/js/sanitize/package.json b/packages/js/sanitize/package.json
index 8a1f0215b68..c7beb0ed885 100644
--- a/packages/js/sanitize/package.json
+++ b/packages/js/sanitize/package.json
@@ -38,7 +38,7 @@
 	},
 	"homepage": "https://github.com/woocommerce/woocommerce/tree/trunk/packages/js/sanitize#readme",
 	"dependencies": {
-		"dompurify": "3.4.14"
+		"dompurify": "3.4.17"
 	},
 	"devDependencies": {
 		"@babel/core": "catalog:tooling",
diff --git a/plugins/woocommerce/changelog/update-deps-security-js-runtime b/plugins/woocommerce/changelog/update-deps-security-js-runtime
new file mode 100644
index 00000000000..0bc6b831e31
--- /dev/null
+++ b/plugins/woocommerce/changelog/update-deps-security-js-runtime
@@ -0,0 +1,4 @@
+Significance: patch
+Type: update
+
+Update bundled JavaScript libraries, including DOMPurify, zod, uuid, qs and moment, to versions that fix reported security issues.
diff --git a/plugins/woocommerce/client/admin/package.json b/plugins/woocommerce/client/admin/package.json
index bbc990dc3a8..80cdc4f79b5 100644
--- a/plugins/woocommerce/client/admin/package.json
+++ b/plugins/woocommerce/client/admin/package.json
@@ -128,7 +128,7 @@
 		"redux": "^4.2.1",
 		"xstate": "4.37.1",
 		"xstate5": "npm:xstate@^5.13.1",
-		"zod": "^3.22.4"
+		"zod": "^4.6.7"
 	},
 	"devDependencies": {
 		"@automattic/color-studio": "^4.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 17c134bfe37..11ec3d39a93 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -325,7 +325,7 @@ importers:
         version: 1.0.4
       moment:
         specifier: ^2.29.4
-        version: 2.30.1
+        version: 2.31.0
       node-stream-zip:
         specifier: ^1.15.0
         version: 1.15.0
@@ -575,7 +575,7 @@ importers:
         version: 6.0.0
       moment:
         specifier: ^2.29.4
-        version: 2.30.1
+        version: 2.31.0
       moment-timezone:
         specifier: ^0.5.43
         version: 0.5.48
@@ -584,7 +584,7 @@ importers:
         version: 15.8.1
       react-dates:
         specifier: ^21.8.0
-        version: 21.8.0(@babel/runtime@7.25.7)(moment@2.30.1)(react-dom@18.3.1(react@18.3.1))(react-with-direction@1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1)
+        version: 21.8.0(@babel/runtime@7.25.7)(moment@2.31.0)(react-dom@18.3.1(react@18.3.1))(react-with-direction@1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1)
       react-transition-group:
         specifier: ^4.4.5
         version: 4.4.5(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
@@ -707,8 +707,8 @@ importers:
         specifier: 5.7.x
         version: 5.7.3
       uuid:
-        specifier: ^9.0.1
-        version: 9.0.1
+        specifier: ^11.1.1
+        version: 11.1.1
       webpack:
         specifier: catalog:tooling
         version: 5.97.1(@swc/core@1.15.24)(esbuild@0.27.7)(webpack-cli@5.1.4)
@@ -1001,10 +1001,10 @@ importers:
         version: 2.3.0
       moment:
         specifier: ^2.18.1
-        version: 2.30.1
+        version: 2.31.0
       qs:
         specifier: ^6.11.2
-        version: 6.15.1
+        version: 6.16.2
       rememo:
         specifier: ^4.0.2
         version: 4.0.2
@@ -1101,10 +1101,10 @@ importers:
         version: 4.18.1
       moment:
         specifier: ^2.29.4
-        version: 2.30.1
+        version: 2.31.0
       qs:
         specifier: ^6.11.2
-        version: 6.15.1
+        version: 6.16.2
     devDependencies:
       '@babel/core':
         specifier: catalog:tooling
@@ -1514,7 +1514,7 @@ importers:
         version: 3.4.2(react@18.3.1)
       moment:
         specifier: ^2.29.4
-        version: 2.30.1
+        version: 2.31.0
       react-intersection-observer:
         specifier: ^9.8.1
         version: 9.16.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
@@ -1632,7 +1632,7 @@ importers:
         version: 0.7.2
       qs:
         specifier: ^6.11.2
-        version: 6.15.1
+        version: 6.16.2
     devDependencies:
       '@babel/core':
         specifier: catalog:tooling
@@ -1932,7 +1932,7 @@ importers:
         version: 4.18.1
       qs:
         specifier: ^6.11.2
-        version: 6.15.1
+        version: 6.16.2
       react-router-dom:
         specifier: ~6.3.0
         version: 6.3.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
@@ -2281,8 +2281,8 @@ importers:
   packages/js/sanitize:
     dependencies:
       dompurify:
-        specifier: 3.4.14
-        version: 3.4.14
+        specifier: 3.4.17
+        version: 3.4.17
     devDependencies:
       '@babel/core':
         specifier: catalog:tooling
@@ -2474,7 +2474,7 @@ importers:
         version: 5.1.0
       js-yaml:
         specifier: ^4.3.1
-        version: 4.3.1
+        version: 4.3.2
       json-refs:
         specifier: ^3.0.15
         version: 3.0.15
@@ -3066,7 +3066,7 @@ importers:
         version: 3.2.0(react@18.3.1)
       qs:
         specifier: ^6.11.2
-        version: 6.15.1
+        version: 6.16.2
       react:
         specifier: 18.3.x
         version: 18.3.1
@@ -3092,8 +3092,8 @@ importers:
         specifier: npm:xstate@^5.13.1
         version: xstate@5.30.0
       zod:
-        specifier: ^3.22.4
-        version: 3.25.76
+        specifier: ^4.6.7
+        version: 4.6.7
     devDependencies:
       '@automattic/color-studio':
         specifier: ^4.0.0
@@ -3280,7 +3280,7 @@ importers:
         version: 2.9.4(webpack@5.97.1)
       moment:
         specifier: ^2.29.4
-        version: 2.30.1
+        version: 2.31.0
       moment-timezone:
         specifier: ^0.5.43
         version: 0.5.48
@@ -4103,7 +4103,7 @@ importers:
         version: 4.0.3
       js-yaml:
         specifier: ^4.3.1
-        version: 4.3.1
+        version: 4.3.2
       luxon:
         specifier: ^3.4.4
         version: 3.7.2
@@ -12500,8 +12500,8 @@ packages:
     resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
     engines: {node: '>= 4'}

-  dompurify@3.4.14:
-    resolution: {integrity: sha512-dVoH9z+MY+C9IilgGCk3YfFqjLi3fChm2OiKJMzh6axrJ5qwxqWaZamgmHrpv22CN/KdbZJuGEGgfQoL00LTdg==}
+  dompurify@3.4.17:
+    resolution: {integrity: sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==}

   domutils@2.8.0:
     resolution: {integrity: sha512-w96Cjofp72M5IIhpjgobBimYEfoPjx1Vx0BSX9P30WBdZW2WIKU0T1Bd0kz2eNZ9ikjKgHbEyKx8BB6H1L3h3A==}
@@ -13113,8 +13113,8 @@ packages:
   fast-sort@3.4.1:
     resolution: {integrity: sha512-76uvGPsF6So53sZAqenP9UVT3p5l7cyTHkLWVCMinh41Y8NDrK1IYXJgaBMfc1gk7nJiSRZp676kddFG2Aa5+A==}

-  fast-uri@3.1.5:
-    resolution: {integrity: sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==}
+  fast-uri@3.1.9:
+    resolution: {integrity: sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==}

   fast-xml-builder@1.3.1:
     resolution: {integrity: sha512-pIM/1n3ntFXKYrUZwW7QCK0gAW7XY+wzj1YMIV3tLDvPj/V+zTGJK5e3/4WJfwj0qWw2ElNXiTixda/R+3YSug==}
@@ -14705,8 +14705,8 @@ packages:
     resolution: {integrity: sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==}
     hasBin: true

-  js-yaml@4.3.1:
-    resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
+  js-yaml@4.3.2:
+    resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==}
     hasBin: true

   jsdoc-type-pratt-parser@4.1.0:
@@ -15427,8 +15427,8 @@ packages:
   moment-timezone@0.5.48:
     resolution: {integrity: sha512-f22b8LV1gbTO2ms2j2z13MuPogNoh5UzxL3nzNAYKGraILnbGc9NEE6dyiiiLv46DGRb8A4kg8UKWLjPthxBHw==}

-  moment@2.30.1:
-    resolution: {integrity: sha512-uEmtNhbDOrWPFS+hdjFCBfy9f2YoyzRpwcl+DqpC6taX21FzsTLQVbMV/W7PzNSX6x/bhC1zA3c2UQ5NzH6how==}
+  moment@2.31.0:
+    resolution: {integrity: sha512-0acOTfMiWOheYS4eoWb80yYMb/JLvVv9SHbs2PehaDzfUG0Bw855SKyk0IKTnPGa5+U2bmi3W68l1+sGLX/pvw==}

   motion-dom@11.18.1:
     resolution: {integrity: sha512-g76KvA001z+atjfxczdRtw/RXOM3OMSdd1f4DL77qCTF/+avrRJiawSG4yDibEQ215sr9kpinSlX2pCTJ9zbhw==}
@@ -16538,8 +16538,8 @@ packages:
     resolution: {integrity: sha512-TEHFzb5KRDKaOgJ4TYE+0jyJtFbjLvkdVOu0fZ2b6MTWzoqZd4Le+61aEppWkvTlYePgOX4ATL1wsAIPMLTw6Q==}
     engines: {node: '>=4'}

-  postcss-selector-parser@7.1.1:
-    resolution: {integrity: sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==}
+  postcss-selector-parser@7.1.7:
+    resolution: {integrity: sha512-wWBro/7hJ40ye6TPiXkUQoXKCw23xSsjriUvqd7Uls9Sso3oLiON1flc18cCdnjgCRXw4fBVqUJJeOdDTh3P3g==}
     engines: {node: '>=4'}

   postcss-svgo@5.1.0:
@@ -16730,8 +16730,8 @@ packages:
     peerDependencies:
       react: ^16.8.0 || ^17.0.0 || ^18.0.0

-  qs@6.15.1:
-    resolution: {integrity: sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==}
+  qs@6.15.4:
+    resolution: {integrity: sha512-d1zNHS+ltAfSgTmYjzXXH9gy9d6pEb33n0ZtUUkukA8UHhFSjv2mSYRiePyjbRiJh0g5sFJbMdAtMIg01Xf5/w==}
     engines: {node: '>=0.6'}

   qs@6.16.2:
@@ -17668,14 +17668,14 @@ packages:
     resolution: {integrity: sha512-FqlEuoTq/zRmA4Lg6aOqyH3lCHbUtCB0bmHCeFniX2GBdDqMJM3FwdvEhlE5Pim1dlt2FfBdVPmUNNiGhhKqpw==}
     engines: {node: '>=20.0.0'}

-  seroval-plugins@1.5.2:
-    resolution: {integrity: sha512-qpY0Cl+fKYFn4GOf3cMiq6l72CpuVaawb6ILjubOQ+diJ54LfOWaSSPsaswN8DRPIPW4Yq+tE1k5aKd7ILyaFg==}
+  seroval-plugins@1.6.8:
+    resolution: {integrity: sha512-N7mWAMydj89EnYTHtRpS3LBrAz3J9O6oVrqpuXuvlAHfAUG8WEKqtbAd7SBiJNY5NfCAFhSdyAh7wI4Shjqy4g==}
     engines: {node: '>=10'}
     peerDependencies:
       seroval: ^1.0

-  seroval@1.5.3:
-    resolution: {integrity: sha512-BXe0x4buEeYiIKaRUnth1WqCILQ3k4O67KP/B4pC3pVz0Mv2c96ngA9QDREUYxWY1sb2RZVRqwI9RcpVMyHCVw==}
+  seroval@1.6.8:
+    resolution: {integrity: sha512-HlSgSAkTk4EqHcje1ptJjfZi1YDv5KbhVJ/d3P7T/nAXua2VmDu+AKDX5VTdFfZf48nDkWB2TKYt0DrCSa+3wg==}
     engines: {node: '>=10'}

   serve-index@1.9.2:
@@ -17761,10 +17761,6 @@ packages:
     resolution: {integrity: sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==}
     engines: {node: '>= 0.4'}

-  side-channel@1.1.0:
-    resolution: {integrity: sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==}
-    engines: {node: '>= 0.4'}
-
   side-channel@1.1.1:
     resolution: {integrity: sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==}
     engines: {node: '>= 0.4'}
@@ -17851,8 +17847,8 @@ packages:
     resolution: {integrity: sha512-psgxdGMwl5MZM9S3FWee4EgsEaIjahYV5AzGnwUvPhWeITz/j6rKpysQHlQ4USdxvINlb8lKfWGIXwfkrgtqkA==}
     engines: {node: '>= 10'}

-  source-map-js@1.2.1:
-    resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
+  source-map-js@1.2.2:
+    resolution: {integrity: sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==}
     engines: {node: '>=0.10.0'}

   source-map-loader@3.0.2:
@@ -18829,6 +18825,10 @@ packages:
     resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
     engines: {node: '>= 0.4.0'}

+  uuid@11.1.1:
+    resolution: {integrity: sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==}
+    hasBin: true
+
   uuid@14.0.0:
     resolution: {integrity: sha512-Qo+uWgilfSmAhXCMav1uYFynlQO7fMFiMVZsQqZRMIXp0O7rR7qjkj+cPvBHLgBqi960QCoo/PH2/6ZtVqKvrg==}
     hasBin: true
@@ -21637,9 +21637,9 @@ snapshots:
       '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
       '@csstools/css-tokenizer': 3.0.4

-  '@csstools/selector-specificity@5.0.0(postcss-selector-parser@7.1.1)':
+  '@csstools/selector-specificity@5.0.0(postcss-selector-parser@7.1.7)':
     dependencies:
-      postcss-selector-parser: 7.1.1
+      postcss-selector-parser: 7.1.7

   '@date-fns/tz@1.5.0': {}

@@ -24714,8 +24714,8 @@ snapshots:
     dependencies:
       '@tanstack/history': 1.161.6
       cookie-es: 3.1.1
-      seroval: 1.5.3
-      seroval-plugins: 1.5.2(seroval@1.5.3)
+      seroval: 1.6.8
+      seroval-plugins: 1.6.8(seroval@1.6.8)

   '@tanstack/store@0.9.3': {}

@@ -26727,9 +26727,9 @@ snapshots:
       highlight-words-core: 1.2.3
       lodash: 4.18.1
       memize: 1.1.0
-      moment: 2.30.1
+      moment: 2.31.0
       re-resizable: 6.11.2(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
-      react-dates: 17.2.0(moment@2.30.1)(react-dom@18.3.1(react@18.3.1))(react-with-direction@1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1)
+      react-dates: 17.2.0(moment@2.31.0)(react-dom@18.3.1(react@18.3.1))(react-with-direction@1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1)
       react-resize-aware: 3.1.1(react@18.3.1)
       react-spring: 8.0.27(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       react-use-gesture: 9.1.3(react@18.3.1)
@@ -28367,26 +28367,26 @@ snapshots:
     dependencies:
       '@babel/runtime': 7.29.10
       '@wordpress/deprecated': 3.58.0
-      moment: 2.30.1
+      moment: 2.31.0
       moment-timezone: 0.5.48

   '@wordpress/date@5.20.0':
     dependencies:
       '@babel/runtime': 7.25.7
       '@wordpress/deprecated': 4.57.0
-      moment: 2.30.1
+      moment: 2.31.0
       moment-timezone: 0.5.48

   '@wordpress/date@5.33.1':
     dependencies:
       '@wordpress/deprecated': 4.57.0
-      moment: 2.30.1
+      moment: 2.31.0
       moment-timezone: 0.5.48

   '@wordpress/date@5.57.0':
     dependencies:
       '@wordpress/deprecated': 4.57.0
-      moment: 2.30.1
+      moment: 2.31.0
       moment-timezone: 0.5.48

   '@wordpress/dependency-extraction-webpack-plugin@6.43.1-next.v.202604091042.0(webpack@5.97.1)':
@@ -31769,7 +31769,7 @@ snapshots:
   ajv@8.18.0:
     dependencies:
       fast-deep-equal: 3.1.3
-      fast-uri: 3.1.5
+      fast-uri: 3.1.9
       json-schema-traverse: 1.0.0
       require-from-string: 2.0.2

@@ -32951,7 +32951,7 @@ snapshots:
   cosmiconfig@8.3.6(typescript@5.7.3):
     dependencies:
       import-fresh: 3.3.1
-      js-yaml: 4.3.1
+      js-yaml: 4.3.2
       parse-json: 5.2.0
       path-type: 4.0.0
     optionalDependencies:
@@ -32961,7 +32961,7 @@ snapshots:
     dependencies:
       env-paths: 2.2.1
       import-fresh: 3.3.1
-      js-yaml: 4.3.1
+      js-yaml: 4.3.2
       parse-json: 5.2.0
     optionalDependencies:
       typescript: 5.7.3
@@ -33070,17 +33070,17 @@ snapshots:
   css-tree@2.2.1:
     dependencies:
       mdn-data: 2.0.28
-      source-map-js: 1.2.1
+      source-map-js: 1.2.2

   css-tree@2.3.1:
     dependencies:
       mdn-data: 2.0.30
-      source-map-js: 1.2.1
+      source-map-js: 1.2.2

   css-tree@3.2.1:
     dependencies:
       mdn-data: 2.27.1
-      source-map-js: 1.2.1
+      source-map-js: 1.2.2

   css-what@6.2.2: {}

@@ -33538,7 +33538,7 @@ snapshots:
     dependencies:
       domelementtype: 2.3.0

-  dompurify@3.4.14:
+  dompurify@3.4.17:
     optionalDependencies:
       '@types/trusted-types': 2.0.7

@@ -34343,7 +34343,7 @@ snapshots:
       parseurl: 1.3.3
       path-to-regexp: 0.1.13
       proxy-addr: 2.0.8
-      qs: 6.15.1
+      qs: 6.15.4
       range-parser: 1.2.1
       safe-buffer: 5.2.1
       send: 0.19.2
@@ -34452,7 +34452,7 @@ snapshots:

   fast-sort@3.4.1: {}

-  fast-uri@3.1.5: {}
+  fast-uri@3.1.9: {}

   fast-xml-builder@1.3.1:
     dependencies:
@@ -36419,7 +36419,7 @@ snapshots:
       argparse: 1.0.10
       esprima: 4.0.1

-  js-yaml@4.3.1:
+  js-yaml@4.3.2:
     dependencies:
       argparse: 2.0.1

@@ -37028,7 +37028,7 @@ snapshots:
       get-stdin: 9.0.0
       glob: 7.2.3
       ignore: 5.2.4
-      js-yaml: 4.3.1
+      js-yaml: 4.3.2
       jsonc-parser: 3.0.0
       markdownlint: 0.25.1
       markdownlint-rule-helpers: 0.16.0
@@ -37240,9 +37240,9 @@ snapshots:

   moment-timezone@0.5.48:
     dependencies:
-      moment: 2.30.1
+      moment: 2.31.0

-  moment@2.30.1: {}
+  moment@2.31.0: {}

   motion-dom@11.18.1:
     dependencies:
@@ -38208,13 +38208,13 @@ snapshots:
     dependencies:
       icss-utils: 5.1.0(postcss@8.5.26)
       postcss: 8.5.26
-      postcss-selector-parser: 7.1.1
+      postcss-selector-parser: 7.1.7
       postcss-value-parser: 4.2.0

   postcss-modules-scope@3.2.1(postcss@8.5.26):
     dependencies:
       postcss: 8.5.26
-      postcss-selector-parser: 7.1.1
+      postcss-selector-parser: 7.1.7

   postcss-modules-values@4.0.0(postcss@8.5.26):
     dependencies:
@@ -38381,7 +38381,7 @@ snapshots:
       cssesc: 3.0.0
       util-deprecate: 1.0.2

-  postcss-selector-parser@7.1.1:
+  postcss-selector-parser@7.1.7:
     dependencies:
       cssesc: 3.0.0
       util-deprecate: 1.0.2
@@ -38425,7 +38425,7 @@ snapshots:
     dependencies:
       nanoid: 3.3.18
       picocolors: 1.1.1
-      source-map-js: 1.2.1
+      source-map-js: 1.2.2

   postgres-array@2.0.0: {}

@@ -38601,9 +38601,10 @@ snapshots:
     dependencies:
       react: 18.3.1

-  qs@6.15.1:
+  qs@6.15.4:
     dependencies:
-      side-channel: 1.1.0
+      es-define-property: 1.0.1
+      side-channel: 1.1.1

   qs@6.16.2:
     dependencies:
@@ -38663,20 +38664,20 @@ snapshots:
       react: 18.3.1
       react-dom: 18.3.1(react@18.3.1)

-  react-dates@17.2.0(moment@2.30.1)(react-dom@18.3.1(react@18.3.1))(react-with-direction@1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1):
+  react-dates@17.2.0(moment@2.31.0)(react-dom@18.3.1(react@18.3.1))(react-with-direction@1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1):
     dependencies:
       airbnb-prop-types: 2.16.0(react@18.3.1)
       consolidated-events: 2.0.2
       is-touch-device: 1.0.1
       lodash: 4.18.1
-      moment: 2.30.1
+      moment: 2.31.0
       object.assign: 4.1.7
       object.values: 1.2.1
       prop-types: 15.8.1
       react: 18.3.1
       react-addons-shallow-compare: 15.6.3
       react-dom: 18.3.1(react@18.3.1)
-      react-moment-proptypes: 1.8.1(moment@2.30.1)
+      react-moment-proptypes: 1.8.1(moment@2.31.0)
       react-outside-click-handler: 1.3.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       react-portal: 4.3.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       react-with-styles: 3.2.3(react-with-direction@1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1)
@@ -38684,7 +38685,7 @@ snapshots:
     transitivePeerDependencies:
       - react-with-direction

-  react-dates@21.8.0(@babel/runtime@7.25.7)(moment@2.30.1)(react-dom@18.3.1(react@18.3.1))(react-with-direction@1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1):
+  react-dates@21.8.0(@babel/runtime@7.25.7)(moment@2.31.0)(react-dom@18.3.1(react@18.3.1))(react-with-direction@1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1):
     dependencies:
       '@babel/runtime': 7.25.7
       airbnb-prop-types: 2.16.0(react@18.3.1)
@@ -38692,14 +38693,14 @@ snapshots:
       enzyme-shallow-equal: 1.0.7
       is-touch-device: 1.0.1
       lodash: 4.18.1
-      moment: 2.30.1
+      moment: 2.31.0
       object.assign: 4.1.7
       object.values: 1.2.1
       prop-types: 15.8.1
       raf: 3.4.1
       react: 18.3.1
       react-dom: 18.3.1(react@18.3.1)
-      react-moment-proptypes: 1.8.1(moment@2.30.1)
+      react-moment-proptypes: 1.8.1(moment@2.31.0)
       react-outside-click-handler: 1.3.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       react-portal: 4.3.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       react-with-direction: 1.4.0(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
@@ -38808,9 +38809,9 @@ snapshots:
       react-lifecycles-compat: 3.0.4
       warning: 4.0.3

-  react-moment-proptypes@1.8.1(moment@2.30.1):
+  react-moment-proptypes@1.8.1(moment@2.31.0):
     dependencies:
-      moment: 2.30.1
+      moment: 2.31.0

   react-number-format@5.4.5(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
     dependencies:
@@ -39525,7 +39526,7 @@ snapshots:
     dependencies:
       chokidar: 3.6.0
       immutable: 4.3.9
-      source-map-js: 1.2.1
+      source-map-js: 1.2.2

   sax@1.6.0: {}

@@ -39609,11 +39610,11 @@ snapshots:

   serialize-javascript@7.1.4: {}

-  seroval-plugins@1.5.2(seroval@1.5.3):
+  seroval-plugins@1.6.8(seroval@1.6.8):
     dependencies:
-      seroval: 1.5.3
+      seroval: 1.6.8

-  seroval@1.5.3: {}
+  seroval@1.6.8: {}

   serve-index@1.9.2:
     dependencies:
@@ -39727,14 +39728,6 @@ snapshots:
       object-inspect: 1.13.4
       side-channel-map: 1.0.1

-  side-channel@1.1.0:
-    dependencies:
-      es-errors: 1.3.0
-      object-inspect: 1.13.4
-      side-channel-list: 1.0.1
-      side-channel-map: 1.0.1
-      side-channel-weakmap: 1.0.2
-
   side-channel@1.1.1:
     dependencies:
       es-errors: 1.3.0
@@ -39850,13 +39843,13 @@ snapshots:

   source-map-generator@0.8.0: {}

-  source-map-js@1.2.1: {}
+  source-map-js@1.2.2: {}

   source-map-loader@3.0.2(webpack@5.97.1):
     dependencies:
       abab: 2.0.6
       iconv-lite: 0.6.3
-      source-map-js: 1.2.1
+      source-map-js: 1.2.2
       webpack: 5.97.1(@swc/core@1.15.24)(esbuild@0.27.7)(uglify-js@3.19.3)(webpack-cli@5.1.4)

   source-map-support@0.5.13:
@@ -40214,7 +40207,7 @@ snapshots:
       mdn-data: 2.28.0
       postcss-media-query-parser: 0.2.3
       postcss-resolve-nested-selector: 0.1.6
-      postcss-selector-parser: 7.1.1
+      postcss-selector-parser: 7.1.7
       postcss-value-parser: 4.2.0
       stylelint: 16.26.1(typescript@5.7.3)

@@ -40224,7 +40217,7 @@ snapshots:
       '@csstools/css-syntax-patches-for-csstree': 1.1.3(css-tree@3.2.1)
       '@csstools/css-tokenizer': 3.0.4
       '@csstools/media-query-list-parser': 4.0.3(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
-      '@csstools/selector-specificity': 5.0.0(postcss-selector-parser@7.1.1)
+      '@csstools/selector-specificity': 5.0.0(postcss-selector-parser@7.1.7)
       '@dual-bundle/import-meta-resolve': 4.2.1
       balanced-match: 2.0.0
       colord: 2.10.0
@@ -40251,7 +40244,7 @@ snapshots:
       postcss: 8.5.26
       postcss-resolve-nested-selector: 0.1.6
       postcss-safe-parser: 7.0.1(postcss@8.5.26)
-      postcss-selector-parser: 7.1.1
+      postcss-selector-parser: 7.1.7
       postcss-value-parser: 4.2.0
       resolve-from: 5.0.0
       string-width: 4.2.3
@@ -40275,7 +40268,7 @@ snapshots:
       formidable: 2.1.5
       methods: 1.1.2
       mime: 2.6.0
-      qs: 6.15.1
+      qs: 6.16.2
       readable-stream: 3.6.2
       semver: 7.8.5
     transitivePeerDependencies:
@@ -40985,6 +40978,8 @@ snapshots:

   utils-merge@1.0.1: {}

+  uuid@11.1.1: {}
+
   uuid@14.0.0: {}

   uuid@8.3.2: {}
@@ -41469,7 +41464,7 @@ snapshots:
     dependencies:
       chalk: 2.4.2
       glob: 7.2.3
-      moment: 2.30.1
+      moment: 2.31.0
       php-parser: 3.5.1
       text-table: 0.2.0