fix: resolve security vulnerabilities through updated deps (#1350)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: jbroma

.changeset/update-jsonwebtoken.md

@@ -0,0 +1,5 @@
+---
+"@callstack/repack": patch
+---
+
+Update jsonwebtoken to ^9.0.3 to resolve jws security vulnerability.

apps/tester-app/package.json

@@ -43,7 +43,7 @@
     "@react-native-community/cli-platform-ios": "catalog:testers",
     "@react-native/babel-preset": "catalog:testers",
     "@react-native/typescript-config": "catalog:testers",
-    "@rsdoctor/rspack-plugin": "^0.4.11",
+    "@rsdoctor/rspack-plugin": "^1.5.2",
     "@rspack/core": "catalog:",
     "@svgr/webpack": "^8.1.0",
     "@swc/core": "^1.13.3",

apps/tester-federation-v2/package.json

@@ -29,7 +29,7 @@
     "@react-native-community/cli": "catalog:testers",
     "@react-native-community/cli-platform-ios": "catalog:testers",
     "@react-native-community/cli-platform-android": "catalog:testers",
-    "@rsdoctor/rspack-plugin": "^0.4.5",
+    "@rsdoctor/rspack-plugin": "^1.5.2",
     "@rspack/core": "catalog:",
     "@swc/helpers": "catalog:",
     "@types/jest": "^29.5.13",

apps/tester-federation/package.json

@@ -34,7 +34,7 @@
     "@react-native-community/cli-platform-ios": "catalog:testers",
     "@react-native/babel-preset": "catalog:testers",
     "@react-native/typescript-config": "catalog:testers",
-    "@rsdoctor/rspack-plugin": "^0.4.5",
+    "@rsdoctor/rspack-plugin": "^1.5.2",
     "@rspack/core": "catalog:",
     "@swc/helpers": "catalog:",
     "@types/jest": "^29.5.13",

packages/repack/package.json

@@ -90,7 +90,7 @@
     "flow-remove-types": "^2.277.0",
     "gradient-string": "^2.0.2",
     "image-size": "^1.1.1",
-    "jsonwebtoken": "^9.0.2",
+    "jsonwebtoken": "^9.0.3",
     "memfs": "^4.11.1",
     "mime-types": "^2.1.35",
     "pretty-format": "^26.6.2",

pnpm-lock.yaml

@@ -11,7 +11,7 @@ catalog:
   "@types/node": ^20.19.31
   "terser-webpack-plugin": ^5.3.14
   "typescript": ^5.8.3
-  "webpack": ^5.99.9
+  "webpack": ^5.104.1
   "react": "19.1.0"
   "react-native": "0.81.0"
   "vitest": ^4.0.18
@@ -22,6 +22,6 @@ catalogs:
     "react-native-test-app": 4.4.7
     "@react-native/babel-preset": "0.81.0"
     "@react-native/typescript-config": "0.81.0"
-    "@react-native-community/cli": "20.0.0"
-    "@react-native-community/cli-platform-android": "20.0.0"
-    "@react-native-community/cli-platform-ios": "20.0.0"
+    "@react-native-community/cli": "20.1.2"
+    "@react-native-community/cli-platform-android": "20.1.2"
+    "@react-native-community/cli-platform-ios": "20.1.2"