fix: address Dependabot security alerts (#1534)

Co-authored-by: Shintaro Okamoto <shintaok@amazon.com>

Author: okamoto-aws

.github/workflows/browser-extension.yml

@@ -18,13 +18,13 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [18.x]
+        node-version: [22.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'

.github/workflows/node.js.yml

@@ -18,15 +18,15 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [18.x]
+        node-version: [22.x]
         # See supported Node.js release schedule at https://nodejs.org/en/about/releases/
     env:
       CDK_DEFAULT_ACCOUNT: 123456789012
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
           cache: 'npm'

browser-extension/package-lock.json

@@ -32,9 +32,9 @@
     "@twind/preset-autoprefix": "^1.0.7",
     "@twind/preset-tailwind": "^1.1.4",
     "aws-amplify": "^6.0.23",
-    "axios": "^1.13.5",
+    "axios": "^1.15.0",
     "immer": "^10.0.4",
-    "lodash-es": "^4.17.23",
+    "lodash-es": "^4.18.0",
     "react": "18.2.0",
     "react-dnd": "^16.0.1",
     "react-dnd-html5-backend": "^16.0.1",
@@ -78,7 +78,7 @@
     "tailwindcss": "^3.3.2",
     "ts-jest": "^29.1.0",
     "typescript": "4.9.5",
-    "vite": "^6.4.1",
+    "vite": "^6.4.2",
     "vite-plugin-svgr": "^4.2.0"
   }
 }