chore(deps): bump the npm_and_yarn group across 1 directory with 17 updates

Bumps the npm_and_yarn group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bn.js](https://github.com/indutny/bn.js) | `5.2.2` | `5.2.3` |
| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.25.4` | `7.26.10` |
| [tar](https://github.com/isaacs/node-tar) | `7.4.3` | `7.5.11` |
| [axios](https://github.com/axios/axios) | `1.7.5` | `1.16.0` |
| [base-x](https://github.com/cryptocoinjs/base-x) | `3.0.10` | `3.0.11` |
| [cipher-base](https://github.com/crypto-browserify/cipher-base) | `1.0.4` | `1.0.7` |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.5.9` | `5.7.2` |
| [flatted](https://github.com/WebReflection/flatted) | `3.3.1` | `3.4.2` |
| [form-data](https://github.com/form-data/form-data) | `4.0.0` | `4.0.5` |
| [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.7.8` | `4.7.9` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` |
| [lodash-es](https://github.com/lodash/lodash) | `4.17.23` | `4.18.1` |
| [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` |
| [pbkdf2](https://github.com/browserify/pbkdf2) | `3.1.2` | `3.1.5` |
| [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` |
| [postcss](https://github.com/postcss/postcss) | `8.4.41` | `8.5.13` |



Updates `bn.js` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/indutny/bn.js/releases)
- [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md)
- [Commits](indutny/bn.js@v5.2.2...v5.2.3)

Updates `@babel/runtime` from 7.25.4 to 7.26.10
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.26.10/packages/babel-runtime)

Updates `tar` from 7.4.3 to 7.5.11
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.4.3...v7.5.11)

Updates `axios` from 1.7.5 to 1.16.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.5...v1.16.0)

Updates `base-x` from 3.0.10 to 3.0.11
- [Commits](cryptocoinjs/base-x@v3.0.10...v3.0.11)

Updates `cipher-base` from 1.0.4 to 1.0.7
- [Changelog](https://github.com/browserify/cipher-base/blob/master/CHANGELOG.md)
- [Commits](browserify/cipher-base@v1.0.4...v1.0.7)

Updates `fast-xml-parser` from 5.5.9 to 5.7.2
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.5.9...v5.7.2)

Updates `flatted` from 3.3.1 to 3.4.2
- [Commits](WebReflection/flatted@v3.3.1...v3.4.2)

Updates `follow-redirects` from 1.15.6 to 1.16.0
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](follow-redirects/follow-redirects@v1.15.6...v1.16.0)

Updates `form-data` from 4.0.0 to 4.0.5
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](form-data/form-data@v4.0.0...v4.0.5)

Updates `handlebars` from 4.7.8 to 4.7.9
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9)

Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.14.1...3.14.2)

Updates `lodash-es` from 4.17.23 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.23...4.18.1)

Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `pbkdf2` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md)
- [Commits](browserify/pbkdf2@v3.1.2...v3.1.5)

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `postcss` from 8.4.41 to 8.5.13
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.41...8.5.13)

---
updated-dependencies:
- dependency-name: "@babel/runtime"
  dependency-version: 7.26.10
  dependency-type: direct:development
- dependency-name: axios
  dependency-version: 1.15.2
  dependency-type: indirect
- dependency-name: base-x
  dependency-version: 3.0.11
  dependency-type: indirect
- dependency-name: bn.js
  dependency-version: 5.2.3
  dependency-type: direct:production
- dependency-name: cipher-base
  dependency-version: 1.0.7
  dependency-type: indirect
- dependency-name: fast-xml-parser
  dependency-version: 5.7.2
  dependency-type: indirect
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
- dependency-name: follow-redirects
  dependency-version: 1.16.0
  dependency-type: indirect
- dependency-name: form-data
  dependency-version: 4.0.5
  dependency-type: indirect
- dependency-name: handlebars
  dependency-version: 4.7.9
  dependency-type: indirect
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
- dependency-name: lodash-es
  dependency-version: 4.18.1
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: pbkdf2
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
- dependency-name: postcss
  dependency-version: 8.5.13
  dependency-type: indirect
- dependency-name: tar
  dependency-version: 7.5.11
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

packages/assets-controllers/package.json

@@ -92,7 +92,7 @@
     "@types/uuid": "^8.3.0",
     "async-mutex": "^0.5.0",
     "bitcoin-address-validation": "^2.2.3",
-    "bn.js": "^5.2.1",
+    "bn.js": "^5.2.3",
     "immer": "^9.0.6",
     "lodash": "^4.17.21",
     "multiformats": "^9.9.0",
@@ -101,7 +101,7 @@
     "uuid": "^8.3.2"
   },
   "devDependencies": {
-    "@babel/runtime": "^7.23.9",
+    "@babel/runtime": "^7.26.10",
     "@metamask/account-api": "^1.0.4",
     "@metamask/auto-changelog": "^6.1.0",
     "@metamask/ethjs-provider-http": "^0.3.0",

packages/controller-utils/package.json

@@ -57,14 +57,14 @@
     "@spruceid/siwe-parser": "2.1.0",
     "@types/bn.js": "^5.1.5",
     "bignumber.js": "^9.1.2",
-    "bn.js": "^5.2.1",
+    "bn.js": "^5.2.3",
     "cockatiel": "^3.1.2",
     "eth-ens-namehash": "^2.0.8",
     "fast-deep-equal": "^3.1.3",
     "lodash": "^4.17.21"
   },
   "devDependencies": {
-    "@babel/runtime": "^7.23.9",
+    "@babel/runtime": "^7.26.10",
     "@metamask/auto-changelog": "^6.1.0",
     "@ts-bridge/cli": "^0.6.4",
     "@types/jest": "^29.5.14",

packages/foundryup/package.json

@@ -46,7 +46,7 @@
   },
   "dependencies": {
     "minipass": "^7.1.2",
-    "tar": "^7.4.3",
+    "tar": "^7.5.11",
     "unzipper": "^0.12.3",
     "yargs": "^17.7.2",
     "yargs-parser": "^21.1.1"

packages/gas-fee-controller/package.json

@@ -63,11 +63,11 @@
     "@metamask/utils": "^11.9.0",
     "@types/bn.js": "^5.1.5",
     "@types/uuid": "^8.3.0",
-    "bn.js": "^5.2.1",
+    "bn.js": "^5.2.3",
     "uuid": "^8.3.2"
   },
   "devDependencies": {
-    "@babel/runtime": "^7.23.9",
+    "@babel/runtime": "^7.26.10",
     "@metamask/auto-changelog": "^6.1.0",
     "@ts-bridge/cli": "^0.6.4",
     "@types/jest": "^29.5.14",

packages/shield-controller/package.json

@@ -62,7 +62,7 @@
     "cockatiel": "^3.1.2"
   },
   "devDependencies": {
-    "@babel/runtime": "^7.23.9",
+    "@babel/runtime": "^7.26.10",
     "@lavamoat/allow-scripts": "^3.0.4",
     "@lavamoat/preinstall-always-fail": "^2.1.0",
     "@metamask/auto-changelog": "^6.1.0",

packages/transaction-controller/package.json

@@ -75,14 +75,14 @@
     "@metamask/utils": "^11.9.0",
     "async-mutex": "^0.5.0",
     "bignumber.js": "^9.1.2",
-    "bn.js": "^5.2.1",
+    "bn.js": "^5.2.3",
     "eth-method-registry": "^4.0.0",
     "fast-json-patch": "^3.1.1",
     "lodash": "^4.17.21",
     "uuid": "^8.3.2"
   },
   "devDependencies": {
-    "@babel/runtime": "^7.23.9",
+    "@babel/runtime": "^7.26.10",
     "@metamask/auto-changelog": "^6.1.0",
     "@metamask/connectivity-controller": "^0.2.0",
     "@metamask/eth-block-tracker": "^15.0.0",

packages/transaction-pay-controller/package.json

@@ -72,7 +72,7 @@
     "@metamask/transaction-controller": "^65.1.0",
     "@metamask/utils": "^11.9.0",
     "bignumber.js": "^9.1.2",
-    "bn.js": "^5.2.1",
+    "bn.js": "^5.2.3",
     "immer": "^9.0.6",
     "lodash": "^4.17.21"
   },

packages/user-operation-controller/package.json

@@ -67,7 +67,7 @@
     "@metamask/superstruct": "^3.1.0",
     "@metamask/transaction-controller": "^65.1.0",
     "@metamask/utils": "^11.9.0",
-    "bn.js": "^5.2.1",
+    "bn.js": "^5.2.3",
     "immer": "^9.0.6",
     "lodash": "^4.17.21",
     "uuid": "^8.3.2"