[AH-18]

The latest container scan of quay.io/semoss/documentation:latest lists 134 findings for JavaScript libraries in /repo/node_modules. This PR updates the libraries that have a fix inside their current major version.

What changed

• pnpm-lock.yaml now resolves these libraries to fixed versions: brace-expansion, browserslist, follow-redirects, image-size, immutable, joi, js-yaml, launch-editor, lodash, nanoid, postcss, proxy-addr, shell-quote, source-map-js, svgo, undici, websocket-driver and ws.
• js-yaml in docusaurus/package.json and the reactor-docgen plugin's package.json goes from ^4.1.1 to ^4.3.2.
• pnpm-workspace.yaml has four overrides (browserslist, js-yaml 4.x, lodash, source-map-js). Some parent packages pin old versions exactly (openapi-to-postmanv2, postman-collection, css-tree, webpack), so without the overrides the old versions stay in the lockfile.

Not done

These libraries need a major version jump for the fix, so I left them alone because that could break the site:

• @faker-js/faker 5.5.3 (fix 10.5.0)
• glob-parent 2.0.0 (fix 5.1.2)
• json5 0.5.1 (fix 1.0.2 or 2.2.2)
• jspdf 3.0.4 (fix 4.0.0 or 4.2.0)
• serialize-javascript 6.0.2 (fix 7.0.3)
• tinypool 1.1.1 (fix 2.1.1 or 2.1.2)
• uuid 8.3.2 (fix 11.1.1)

The scan lists no fix for: braces 3.0.3, fflate 0.8.2, html-minifier-terser 6.1.0 and 7.2.0.