chore(deps): bump dependencies with medium and low-severity CVEs (#41163)

Author: julio-rocketchat

apps/meteor/package.json

@@ -76,7 +76,7 @@
 		"@bugsnag/plugin-react": "~7.19.0",
 		"@datastructures-js/priority-queue": "^6.3.5",
 		"@date-fns/tz": "^1.4.1",
-		"@google-cloud/storage": "^7.19.0",
+		"@google-cloud/storage": "^7.21.0",
 		"@kaciras/deasync": "^1.1.0",
 		"@nivo/bar": "0.88.0",
 		"@nivo/core": "0.88.0",
@@ -196,7 +196,7 @@
 		"date-fns": "~4.1.0",
 		"date.js": "~0.3.3",
 		"debug": "~4.3.7",
-		"dompurify": "~3.4.7",
+		"dompurify": "~3.4.11",
 		"drachtio-srf": "patch:drachtio-srf@npm%3A5.0.12#~/.yarn/patches/drachtio-srf-npm-5.0.12-b0b1afaad6.patch",
 		"ejson": "^2.2.3",
 		"emailreplyparser": "^0.0.5",
@@ -233,7 +233,7 @@
 		"isolated-vm": "5.0.4",
 		"jschardet": "^3.1.4",
 		"jsdom": "^26.1.0",
-		"json-2-csv": "^5.5.10",
+		"json-2-csv": "^5.5.11",
 		"jsrsasign": "^11.1.3",
 		"juice": "^8.1.0",
 		"katex": "~0.16.45",

package.json

@@ -75,8 +75,26 @@
 		"markdown-it": "^14.2.0",
 		"minimist": "1.2.6",
 		"mongodb": "6.10.0",
-		"protobufjs": "7.6.1",
+		"@grpc/proto-loader/protobufjs": "7.6.3",
+		"@opentelemetry/otlp-transformer/protobufjs": "7.6.3",
 		"webdav/axios": "0.32.0",
+		"wait-on/joi": "17.13.4",
+		"webpack-dev-server/launch-editor": "2.14.1",
+		"webpack-dev-server/http-proxy-middleware": "2.0.10",
+		"@changesets/parse/js-yaml": "4.2.0",
+		"@eslint/eslintrc/js-yaml": "4.2.0",
+		"cosmiconfig/js-yaml": "4.2.0",
+		"mocha/js-yaml": "4.2.0",
+		"@istanbuljs/load-nyc-config/js-yaml": "3.15.0",
+		"depcheck/js-yaml": "3.15.0",
+		"read-yaml-file/js-yaml": "3.15.0",
+		"@jest/transform/@babel/core": "7.29.7",
+		"@storybook/test-runner/@babel/core": "7.29.7",
+		"eslint-plugin-react-hooks/@babel/core": "7.29.7",
+		"istanbul-lib-instrument/@babel/core": "7.29.7",
+		"jest-config/@babel/core": "7.29.7",
+		"jest-snapshot/@babel/core": "7.29.7",
+		"react-docgen/@babel/core": "7.29.7",
 		"flatted@npm:^3.1.0": "3.4.2",
 		"flatted@npm:^3.2.9": "3.4.2",
 		"flatted@npm:^3.3.1": "3.4.2",
@@ -177,6 +195,7 @@
 		"tsx/esbuild": "0.28.1",
 		"qs": "6.15.2",
 		"uuid@npm:13": "13.0.1",
+		"@tootallnate/once": "2.0.1",
 		"@react-pdf/layout@npm:^4.6.1": "patch:@react-pdf/layout@npm%3A4.6.1#~/.yarn/patches/@react-pdf-layout-npm-4.6.1-b12fdb71f4.patch"
 	},
 	"dependencies": {

packages/gazzodown/package.json

@@ -22,7 +22,7 @@
 	},
 	"dependencies": {
 		"date-fns": "~4.1.0",
-		"dompurify": "~3.4.7",
+		"dompurify": "~3.4.11",
 		"highlight.js": "11.8.0",
 		"react-error-boundary": "~6.1.2"
 	},

packages/livechat/package.json

@@ -37,7 +37,7 @@
 		"ajv-formats": "^3.0.1",
 		"css-vars-ponyfill": "^2.4.9",
 		"date-fns": "~4.1.0",
-		"dompurify": "~3.4.7",
+		"dompurify": "~3.4.11",
 		"emoji-mart": "^3.0.1",
 		"history": "~5.3.0",
 		"i18next": "~23.4.9",

packages/ui-client/package.json

@@ -19,7 +19,7 @@
 	},
 	"dependencies": {
 		"@rocket.chat/onboarding-ui": "~0.37.2",
-		"dompurify": "~3.4.7"
+		"dompurify": "~3.4.11"
 	},
 	"devDependencies": {
 		"@react-aria/toolbar": "^3.0.0-nightly.5042",

packages/web-ui-registration/package.json

@@ -17,7 +17,7 @@
 		"typecheck": "tsc --noEmit"
 	},
 	"dependencies": {
-		"dompurify": "~3.4.7"
+		"dompurify": "~3.4.11"
 	},
 	"devDependencies": {
 		"@rocket.chat/core-typings": "workspace:~",