chore(deps): bump form-data to 4.0.6, tmp to 0.2.7 [security] (#34023)

Signed-off-by: EugeniyKiyashko <EugeniyKiyashko@users.noreply.github.com>
Co-authored-by: EugeniyKiyashko <EugeniyKiyashko@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: 3 people

pnpm-lock.yaml

@@ -3,6 +3,50 @@ packages:
   - 'e2e/*'
   - 'packages/*'
   - 'packages/devextreme/artifacts/npm/devextreme-dist'
+  - '!packages/sbom'
+
+linkWorkspacePackages: true
+preferWorkspacePackages: true
+saveWorkspaceProtocol: false
+packageManagerStrict: false
+engineStrict: true
+
+overrides:
+  "basic-ftp@<5.3.1": ">=5.3.1"
+  "rollup@<4.59.0": "^4.59.0"
+  "json5@<1.0.2": ^2.2.3
+  "axios@<1.15.2": ^1.15.2
+  "braces@<3.0.3": ^3.0.3
+  "semver@<5.7.2": ^5.7.2
+  qs: ">=6.15.2"
+  "vite@>=6.0.0 <6.4.1": ^7.3.2
+  "tar@<=7.5.9": ^7.5.10
+  "underscore@<=1.13.7": ^1.13.8
+  "hono@<4.12.18": ">=4.12.18"
+  "minimatch@>=9.0.0 < 9.0.7": 9.0.9
+  "picomatch@>=4.0.0 <4.0.4": 4.0.4
+  "micromatch@<4.0.8": ^4.0.8
+  "esbuild@<0.28.1": ^0.28.1
+  "unrs-resolver@<1.12.2": ^1.12.2
+  "tmp@<0.2.7": "^0.2.7"
+  "ajv@>=7.0.0-alpha.0 <8.18.0": ^8.18.0
+  "@tootallnate/once@<3.0.1": ^3.0.1
+  "ws@>=8.0.0 <8.20.1": ^8.20.1
+  "cookie@<0.7.0": ^0.7.0
+  "glob@>=10.2.0 <10.5.0": ^10.5.0
+  "immutable@>=4.0.0-rc.1 <4.3.8": ^4.3.8
+  "ip-address@<=10.1.0": ">=10.1.1"
+  "lodash@<4.18.1": 4.18.1
+  "minimatch@>=10.0.0 < 10.2.4": 10.2.4
+  "path-to-regexp@0.1.12": 0.1.13
+  "postcss@<8.5.10": 8.5.10
+  "rollup@< 4.59.0": ^4.59.0
+  "serialize-javascript@<=7.0.2": 7.0.5
+  "shell-quote@>=1.1.0 <=1.8.3": ^1.8.4
+  "uuid@<14.0.0": ~14.0.0
+  "webpack-dev-server@<=5.2.3": ^5.2.4
+  "yaml@>=2.0.0 <2.8.3": ^2.8.3
+  "form-data@<4.0.6": "^4.0.6"
 
 catalog:
   axe-core: ^4.11.1