[Bill Schnurr (bschnurr)]

Aggregate Dependabot updates

This PR combines 24 open Dependabot PRs on a clean branch from upstream main. Overlapping dependency changes were applied coherently and generated lockfiles were regenerated once.

Source PRs

• Bump webpack-cli from 6.0.1 to 7.0.2 #446 - Bump webpack-cli from 6.0.1 to 7.0.2
• Bump flatted from 3.3.1 to 3.4.2 #448 - Bump flatted from 3.3.1 to 3.4.2
• Bump picomatch from 2.3.1 to 2.3.2 #454 - Bump picomatch from 2.3.1 to 2.3.2
• Bump pygments from 2.19.2 to 2.20.0 in /src/test/python_tests #455 - Bump pygments from 2.19.2 to 2.20.0 in /src/test/python_tests
• Bump the pip-minor-patch group across 1 directory with 2 updates #484 - Bump the pip-minor-patch group across 1 directory with 2 updates
• Bump typescript from 5.9.3 to 6.0.3 #499 - Bump typescript from 5.9.3 to 6.0.3
• Bump eslint from 8.57.1 to 10.3.0 #508 - Bump eslint from 8.57.1 to 10.3.0
• Bump @typescript-eslint/eslint-plugin from 7.18.0 to 8.59.2 #509 - Bump @typescript-eslint/eslint-plugin from 7.18.0 to 8.59.2
• Bump @typescript-eslint/parser from 7.18.0 to 8.59.2 #510 - Bump @typescript-eslint/parser from 7.18.0 to 8.59.2
• Bump sinon from 21.1.2 to 22.0.0 #511 - Bump sinon from 21.1.2 to 22.0.0
• Bump uuid and @azure/msal-node #520 - Bump uuid and @azure/msal-node
• Bump qs from 6.15.1 to 6.15.2 #521 - Bump qs from 6.15.1 to 6.15.2
• Bump tmp from 0.2.5 to 0.2.7 #524 - Bump tmp from 0.2.5 to 0.2.7
• Bump form-data from 4.0.5 to 4.0.6 #535 - Bump form-data from 4.0.5 to 4.0.6
• Bump markdown-it from 14.1.1 to 14.2.0 #536 - Bump markdown-it from 14.1.1 to 14.2.0
• Bump the github-actions-minor-patch group across 1 directory with 3 updates #550 - Bump the github-actions-minor-patch group across 1 directory with 3 updates
• Bump linkify-it from 5.0.0 to 5.0.2 #556 - Bump linkify-it from 5.0.0 to 5.0.2
• Bump undici from 7.25.0 to 7.29.0 #557 - Bump undici from 7.25.0 to 7.29.0
• Bump js-yaml from 4.1.1 to 4.3.1 #560 - Bump js-yaml from 4.1.1 to 4.3.1
• Bump brace-expansion from 1.1.14 to 1.1.18 #565 - Bump brace-expansion from 1.1.14 to 1.1.18
• Bump external/vscode-common-python-lsp from d1b98bc to db2f89d #568 - Bump external/vscode-common-python-lsp from d1b98bc to db2f89d
• Bump fast-uri from 3.1.0 to 3.1.7 #569 - Bump fast-uri from 3.1.0 to 3.1.7
• Bump the npm-minor-patch group across 1 directory with 3 updates #570 - Bump the npm-minor-patch group across 1 directory with 3 updates
• Bump browserslist from 4.28.2 to 4.28.8 #571 - Bump browserslist from 4.28.2 to 4.28.8

Validation

• npm ci/pretest/test; nox install_bundled_libs/tests; VSIX package

Individual Dependabot PRs will remain open until this aggregate PR merges.